Fast, deterministic intelligence across 392,790 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions....
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions....
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions....
Unauthenticated Cross Site Scripting (XSS) in Food Menu â Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0....
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.T...
Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault â Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Incl...
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions....
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions....
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions....
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions....
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions....
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions....
Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions....