Export limit exceeded: 351827 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 46045 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (46045 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-25711 1 Wpglobus 1 Wpglobus Translate Options 2025-01-10 5.8 Medium
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGlobus WPGlobus Translate Options plugin <= 2.1.0 versions.
CVE-2023-25702 1 Fullworksplugins 1 Quick Paypal Payments 2025-01-10 5.9 Medium
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVE-2023-25713 1 Fullworksplugins 1 Quick Paypal Payments 2025-01-10 7.1 High
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVE-2023-29094 1 Piwebsolution 1 Product Page Shipping Calculator For Woocommerce 2025-01-10 5.9 Medium
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.20 versions.
CVE-2023-23799 1 Easy Panorama Project 1 Easy Panorama 2025-01-10 5.9 Medium
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Leonardo Giacone Easy Panorama plugin <= 1.1.4 versions.
CVE-2023-27620 1 Robogallery 1 Robo Gallery 2025-01-10 6.5 Medium
Auth. (contributor+) Stored Cross-site Scripting (XSS) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.12 versions.
CVE-2023-28792 1 I13websolution 1 Continuous Image Carosel With Lightbox 2025-01-10 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions.
CVE-2023-29172 1 Wp-property-hive 1 Propertyhive 2025-01-10 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PropertyHive plugin <= 1.5.46 versions.
CVE-2023-29170 1 Piwebsolution 1 Product Enquiry For Woocommerce 2025-01-10 5.9 Medium
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <= 2.2.12 versions.
CVE-2023-29388 1 Implecode 1 Product Catalog Simple 2025-01-10 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions.
CVE-2022-45358 1 Colorlib 1 Activello 2025-01-10 5.4 Medium
Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.
CVE-2022-43458 1 Codetides 1 Advanced Floating Content 2025-01-10 4.1 Medium
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Code Tides Advanced Floating Content plugin <= 1.2.1 versions.
CVE-2022-44734 1 Bestwebsoft 1 Car Rental 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Car Rental by BestWebSoft plugin <= 1.1.2 versions.
CVE-2022-45849 1 Colorlib 1 Activello Theme 2025-01-10 5.4 Medium
Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.
CVE-2022-45838 1 Reputeinfosystems 1 Arforms Form Builder 2025-01-10 6.1 Medium
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARForms Form Builder plugin <= 1.5.5 versions.
CVE-2022-44632 1 Content-repeater Project 1 Content-repeater 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denis Buka Content Repeater – Custom Posts Simplified plugin <= 1.1.13 versions.
CVE-2022-44631 1 1app 1 1app Business Forms 2025-01-10 4.8 Medium
Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in 1app Technologies, Inc 1app Business Forms plugin <= 1.0.0 versions.
CVE-2022-44582 1 Apptivo 1 Apptivo Business Site Crm 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin <= 3.0.12 versions.
CVE-2024-50339 1 Glpi-project 1 Glpi 2025-01-10 5.3 Medium
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue.
CVE-2022-44594 1 Codebangers 1 All In One Time Clock Lite 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Codebangers All in One Time Clock Lite plugin <= 1.3.320 versions.