Search

Expected end of text, found '.' (at char 11), (line:1, col:12)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (347026 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-25406 2 Themeum, Wordpress 2 Tutor Lms, Wordpress 2026-04-28 8.1 High
Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeum Tutor LMS Pro tutor-pro allows Authentication Abuse.This issue affects Tutor LMS Pro: from n/a through <= 3.9.8.
CVE-2025-68864 2 Infility, Wordpress 2 Infility Global, Wordpress 2026-04-28 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infility Infility Global infility-global allows Stored XSS.This issue affects Infility Global: from n/a through <= 2.15.12.
CVE-2025-68005 2 Themewant, Wordpress 2 Easy Hotel Booking, Wordpress 2026-04-28 6.5 Medium
Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Hotel Booking: from n/a through <= 1.9.3.
CVE-2024-25918 1 Instawp 1 Instawp Connect 2026-04-28 9.9 Critical
Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.
CVE-2024-27191 2 Inpersttion, Wordpress 2 Slivery Extender, Wordpress 2026-04-28 8.5 High
Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Slivery Extender slivery-extender allows Remote Code Inclusion.This issue affects Slivery Extender: from n/a through <= 1.0.2.
CVE-2024-31095 1 Richard Torres 1 Thumbs Rating 2026-04-28 5.3 Medium
A vulnerability in Ricard Torres Thumbs Rating thumbs-rating.This issue affects Thumbs Rating: from n/a through <= 5.1.0.
CVE-2024-31375 1 Wordpress 1 Wordpress 2026-04-28 5.4 Medium
Missing Authorization vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads.This issue affects WP2LEADS: from n/a through <= 3.2.7.
CVE-2024-31230 2 Shortpixel, Wordpress 2 Shortpixel Adaptive Images, Wordpress 2026-04-28 5.3 Medium
Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Images: from n/a through <= 3.8.2.
CVE-2024-31278 1 Leap13 1 Premium Addons For Elementor 2026-04-28 4.3 Medium
Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from n/a through <= 4.10.22.
CVE-2024-31370 1 Wordpress 1 Wordpress 2026-04-28 8.5 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodeIsAwesome AIKit aikit-wordpress-ai-writing-assistant-using-gpt3.This issue affects AIKit: from n/a through <= 4.14.1.
CVE-2024-27972 1 Verygoodplugins 1 Wp Fusion 2026-04-28 9.9 Critical
Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through <= 3.41.24.
CVE-2024-31094 1 Filter Custom Fields And Taxonomies Light 1 Filter Custom Fields And Taxonomies Light 2026-04-28 8.5 High
A vulnerability in websupporter Filter Custom Fields & Taxonomies Light filter-custom-fields-taxonomies-light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through <= 1.05.
CVE-2024-30192 1 Gsplugins 1 Gs Pinterest Portfolio 2026-04-28 6.5 Medium
A vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio.This issue affects GS Pins for Pinterest: from n/a through <= 1.8.2.
CVE-2024-24888 1 Kadencewp 1 Gutenberg Blocks With Ai 2026-04-28 6.4 Medium
Server-Side Request Forgery (SSRF) vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through <= 3.2.25.
CVE-2023-51525 1 Wpsimplebookingcalendar 1 Wp Simple Booking Calendar 2026-04-28 4.3 Medium
A vulnerability in Roland Murg WP Simple Booking Calendar wp-simple-booking-calendar.This issue affects WP Simple Booking Calendar: from n/a through <= 2.0.8.4.
CVE-2023-49837 1 Davidartiss 1 Code Embed 2026-04-28 6.5 Medium
A vulnerability in David Artiss Code Embed simple-embed-code.This issue affects Code Embed: from n/a through <= 2.3.6.
CVE-2023-47231 1 Bainternet 1 Shortcodes Ui 2026-04-28 6.5 Medium
A vulnerability in Bainternet ShortCodes UI shortcodes-ui.This issue affects ShortCodes UI: from n/a through <= 1.9.8.
CVE-2023-47237 1 Auto Publish For Google My Business Project 1 Auto Publish For Google My Business 2026-04-28 5.4 Medium
A vulnerability in Northern Beaches Websites WP Google My Business Auto Publish wp-google-my-business-auto-publish.This issue affects WP Google My Business Auto Publish: from n/a through <= 3.7.
CVE-2023-46824 1 Omaksolutions 1 Slick Popup 2026-04-28 5.9 Medium
A vulnerability in Ankit Singla Slick Popup slick-popup.This issue affects Slick Popup: from n/a through <= 1.7.14.
CVE-2023-47229 1 Vyasdipen 1 Top 25 Social Icons 2026-04-28 6.5 Medium
A vulnerability in Vyas Dipen Download Top 25 Social Icons top-25-social-icons.This issue affects Download Top 25 Social Icons: from n/a through <= 3.1.