Vulnerability index

Browse CVEs

35 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 8.8 CVE-2019-25150 The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3. This makes it possible for attackers …

Email Templates 1.3.1+ Fix from $1,9502023-06-07 MEDIUM 5.4 CVE-2023-0152 The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in …

Wp Multi Store Locator after 2.4 Fix from $1,6002023-06-05 HIGH 7.2 CVE-2022-2352 The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privileg…

Post Smtp 2.1.7+ Fix from $1,9502022-09-26 HIGH 7.5 CVE-2022-1589 The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its se…

All In One Login 1.1.0+ Fix from $1,9502022-05-30 HIGH 8.8 CVE-2021-24755 The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injecti…

Mycred 2.3+ Fix from $1,9502021-11-29