Universal Security Vulnerabilities & CVE Catalog
Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions....
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions....
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions....
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions....
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions....
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions....
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0....
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.T...
Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Incl...
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions....
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions....
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions....