Vulnerability Database

Search by vulnerability name, software or CVE

Title	Severity	Date
WP Super Cache < 1.4.5 - PHP Object Injection	Unknown	- -
WP Super Cache < 1.9 - Unauthenticated Cache Poisoning	Unknown	- -
WordPress < 5.9.2 - Prototype Pollution in jQuery	Unknown	- -
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package	Unknown	- -
WP < 6.0.2 - Reflected Cross-Site Scripting	Unknown	- -
WP < 6.0.2 - Authenticated Stored Cross-Site Scripting	Unknown	- -
WP < 6.0.2 - SQLi via Link API	Unknown	- -
WP < 6.0.3 - Stored XSS via wp-mail.php	Unknown	- -
WP < 6.0.3 - Open Redirect via wp_nonce_ays	Unknown	- -
WP < 6.0.3 - Email Address Disclosure via wp-mail.php	Unknown	- -
WP < 6.0.3 - Reflected XSS via SQLi in Media Library	Unknown	- -
WP < 6.0.3 - CSRF in wp-trackback.php	Unknown	- -
WP < 6.0.3 - Stored XSS via the Customizer	Unknown	- -
WP < 6.0.3 - Stored XSS via Comment Editing	Unknown	- -
WP < 6.0.3 - Content from Multipart Emails Leaked	Unknown	- -
WP < 6.0.3 - SQLi in WP_Date_Query	Unknown	- -
WP < 6.0.3 - Stored XSS via RSS Widget	Unknown	- -
WP < 6.0.3 - Data Exposure via REST Terms/Tags Endpoint	Unknown	- -
WP < 6.0.3 - Multiple Stored XSS via Gutenberg	Unknown	- -
WP < 6.2.1 - Thumbnail Image Update via CSRF	Unknown	- -
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery	Unknown	- -
WP < 6.2.2 - Shortcode Execution in User Generated Data	Unknown	- -
WP < 6.2.1 - Contributor+ Content Injection	Unknown	- -
WP 5.6-6.3.1 - Reflected XSS via Application Password Requests	Unknown	- -
WP < 6.3.2 - Denial of Service via Cache Poisoning	Unknown	- -
WP < 6.3.2 - Subscriber+ Arbitrary Shortcode Execution	Unknown	- -
WordPress < 6.4.3 - Deserialization of Untrusted Data	Unknown	- -
WordPress < 6.4.3 - Admin+ PHP File Upload	Unknown	- -
WordPress < 6.5.5 - Contributor+ Stored XSS in HTML API	Unknown	- -
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block	Unknown	- -
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block	Unknown	- -
CVE-2024-50555	Unknown	- -
WPML Multilingual CMS < 4.6.1 - Reflected Cross-Site Scripting	Unknown	- -
Elementor Page Builder < 2.7.7 - Authenticated Stored XSS	Unknown	- -
Email Encoder Bundle <= 1.4.1 - Unauthenticated Cross-Site Scripting (XSS)	Unknown	- -
Sticky Menu, Sticky Header (or anything!) on Scroll < 2.21 - CSRF & XSS	Unknown	- -
Elementor Website Builder < 3.13.2 - Missing Authorization	Unknown	- -
Premium Addons for Elementor < 4.5.2 - Subscriber+ Arbitrary Blog Option Update	Unknown	- -

‹
1
2
...
6368
6369
6370
6371
6372
6373

Vulnerability Database

318,638

Deep Security Visibility Without the Complexity