National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 399,493 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,390 matching advisories
Page 214 of 1,892
CVE-2025-14120 MEDIUM 6.4
CWE-79 Remote (AV:N)

The URL Image Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.7 due to insufficient sanitization of SVG files....

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-14153 MEDIUM 6.5
CWE-89 Remote (AV:N)

The Page Expire Popup/Redirection for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' shortcode attribute in all versions up to, and including, 1.0 due to insuffi...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-14034 MEDIUM 5.3
CWE-862 Remote (AV:N)

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'delete_single_ticket_callback' and...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-13746 MEDIUM 6.4
CWE-79 Remote (AV:N)

The ForumWP โ€“ Forum & Discussion Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User's Display Name in all versions up to, and including, 2.1.6 due to insufficient inp...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-13652 MEDIUM 6.5
CWE-89 Remote (AV:N)

The CBX Bookmark & Favorite plugin for WordPress is vulnerable to generic SQL Injection via the โ€˜orderbyโ€™ parameter in all versions up to, and including, 2.0.4 due to insufficient escaping on the user...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-13409 MEDIUM 4.9
CWE-89 Remote (AV:N)

The Form Vibes โ€“ Database Manager for Forms plugin for WordPress is vulnerable to SQL Injection via the 'params' parameter in all versions up to, and including, 1.4.13 due to insufficient escaping on ...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-11723 MEDIUM 6.5
CWE-330 Remote (AV:N)

The Appointment Booking Calendar โ€” Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.9.5 via th...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-11370 MEDIUM 5.3
CWE-862 Remote (AV:N)

The Popup and Slider Builder by Depicter โ€“ Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to unauthorized...

๐Ÿ“… 2026-01-06 Inspect Dossier →
asus/myasus CWE-426

An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from an attacker-controlled location, potentially result...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20807 MEDIUM 6.7
google/android CWE-190

In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User intera...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20806 MEDIUM 6.7
google/android CWE-416

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20805 MEDIUM 6.7
google/android CWE-416

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20804 MEDIUM 6.7
google/android CWE-416

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20803 MEDIUM 6.7
google/android CWE-190

In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interact...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20802 MEDIUM 6.7
google/android CWE-416

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interac...

๐Ÿ“… 2026-01-06 Inspect Dossier →
google/android CWE-415

In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interact...

๐Ÿ“… 2026-01-06 Inspect Dossier →
google/android CWE-787

In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User...

๐Ÿ“… 2026-01-06 Inspect Dossier →
google/android CWE-416

In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction ...

๐Ÿ“… 2026-01-06 Inspect Dossier →
google/android CWE-787

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User...

๐Ÿ“… 2026-01-06 Inspect Dossier →
google/android CWE-121

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User...

๐Ÿ“… 2026-01-06 Inspect Dossier →
google/android CWE-1285

In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us...

๐Ÿ“… 2026-01-06 Inspect Dossier →
google/android CWE-787

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20794 MEDIUM 6.5
mediatek/nr15 CWE-121

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with...

๐Ÿ“… 2026-01-06 Inspect Dossier →
CVE-2025-20793 MEDIUM 6.5
mediatek/nr15 CWE-476

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with ...

๐Ÿ“… 2026-01-06 Inspect Dossier →
Showing Page 214 of 1,892 • 45,390 matching CVEs (out of 399,493 NIST advisories)