National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 39,245 matching advisories
Page 144 of 1,636
CVE-2024-13544 MEDIUM 4.8
amini7/zarinpal_paid_download CWE-434 Remote (AV:N)

The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they sh...

📅 2025-02-11 Inspect Dossier →
CVE-2024-13543 MEDIUM 6.1
amini7/zarinpal_paid_download CWE-79 Remote (AV:N)

The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used ...

📅 2025-02-11 Inspect Dossier →
CVE-2024-12599 MEDIUM 6.4
hasthemes/ht_mega CWE-79 Remote (AV:N)

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 2.8.1 due to insuf...

📅 2025-02-11 Inspect Dossier →
Showing Page 144 of 1,636 • 39,245 matching CVEs (out of 396,747 NIST advisories)