Vulnerability Database

Search by vulnerability name, software or CVE

Title	Severity	Date
WP < 6.0.3 - Content from Multipart Emails Leaked	Unknown	- -
WP < 6.0.3 - SQLi in WP_Date_Query	Unknown	- -
WP < 6.0.3 - Stored XSS via RSS Widget	Unknown	- -
WP < 6.0.3 - Data Exposure via REST Terms/Tags Endpoint	Unknown	- -
WP < 6.0.3 - Multiple Stored XSS via Gutenberg	Unknown	- -
WP < 6.2.1 - Thumbnail Image Update via CSRF	Unknown	- -
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery	Unknown	- -
WP < 6.2.2 - Shortcode Execution in User Generated Data	Unknown	- -
WP < 6.2.1 - Contributor+ Content Injection	Unknown	- -
WP 5.6-6.3.1 - Reflected XSS via Application Password Requests	Unknown	- -
WP < 6.3.2 - Denial of Service via Cache Poisoning	Unknown	- -
WP < 6.3.2 - Subscriber+ Arbitrary Shortcode Execution	Unknown	- -
WordPress < 6.4.3 - Deserialization of Untrusted Data	Unknown	- -
WordPress < 6.4.3 - Admin+ PHP File Upload	Unknown	- -
WordPress < 6.5.5 - Contributor+ Stored XSS in HTML API	Unknown	- -
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block	Unknown	- -
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block	Unknown	- -
CVE-2025-58674	Unknown	- -
CVE-2025-58246	Unknown	- -
CVE-2024-50555	Unknown	- -
WPML Multilingual CMS < 4.6.1 - Reflected Cross-Site Scripting	Unknown	- -
Elementor Page Builder < 2.7.7 - Authenticated Stored XSS	Unknown	- -
Email Encoder Bundle <= 1.4.1 - Unauthenticated Cross-Site Scripting (XSS)	Unknown	- -
Sticky Menu, Sticky Header (or anything!) on Scroll < 2.21 - CSRF & XSS	Unknown	- -
Elementor Website Builder < 3.13.2 - Missing Authorization	Unknown	- -
Premium Addons for Elementor < 4.5.2 - Subscriber+ Arbitrary Blog Option Update	Unknown	- -

‹
1
2
...
6012
6013
6014
6015
6016
6017

Vulnerability Database

300,826

Deep Security Visibility Without the Complexity