Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.3 CVE-2020-36716 The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the setup_page function in versio…

Wp Activity Log after 4.0.1 Fix from $1,9502023-06-07 MEDIUM 5.9 CVE-2022-2891 The WP 2FA WordPress plugin before 2.3.0 uses comparison operators that don't mitigate time-based attacks, which could be abused to leak information …

Wp 2fa 2.3.0+ Fix from $1,6002022-10-10 CRITICAL 9.8 CVE-2022-2269 The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it in a SQL statement via an acti…

Website File Changes Monitor 1.8.3+ Fix from $2,3002022-08-08 HIGH 8.8 CVE-2022-2184 The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-side templates. This can be abu…

Captcha 4wp 7.1.0+ Fix from $1,9502022-08-01 MEDIUM 6.1 CVE-2022-1527 The WP 2FA WordPress plugin before 2.2.1 does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected …

Wp 2fa 2.2.1+ Fix from $1,6002022-05-30