Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions....
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions....
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions....
Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions....
Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions....
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions....
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions....
Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions....
Administrator PHP Object Injection in Complianz <= 7.5.0 versions....
Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions....
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions....
Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions....
Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7....
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions....
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Cre...
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-...
Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a...
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions....
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions....
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions....
Contributor Broken Access Control in Style Kits <= 2.6.5 versions....
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue...