Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9146 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-32123 1 Dream-theme 1 The7 2026-04-28 6.1 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3.
CVE-2023-31230 1 Baidu-tongji-generator Project 1 Baidu-tongji-generator 2026-04-28 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in Haoqisir Baidu Tongji generator allows Stored XSS.This issue affects Baidu Tongji generator: from n/a through 1.0.2.
CVE-2023-31089 1 Webternsolutions 1 Video Xml Sitemap Generator 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0.
CVE-2023-31075 1 Ciphercoin 1 Easy Hide Login 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8.
CVE-2023-28987 1 Wpmet 1 Wp Ultimate Review 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
CVE-2023-28780 1 Yoast 1 Yoast Local Seo 2026-04-28 6.5 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Yoast Yoast Local Premium.This issue affects Yoast Local Premium: from n/a through 14.8.
CVE-2023-28694 1 Wbcomdesigns 1 Buddypress Activity Social Share 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin <= 3.5.0 versions.
CVE-2023-28747 1 Codeboxr 1 Cbx Currency Converter 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in codeboxr CBX Currency Converter plugin <= 3.0.3 versions.
CVE-2023-27632 1 Mmrs151 1 Daily Prayer Time 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.03.08 versions.
CVE-2023-27434 1 Wpgrim 1 Classic Editor And Classic Widgets 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Classic Editor and Classic Widgets plugin <= 1.2.5 versions.
CVE-2023-26535 1 Wppool 1 Sheets To Wp Table Live Sync 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPPOOL Sheets To WP Table Live Sync plugin <= 2.12.15 versions.
CVE-2023-25985 1 Tooltips 1 Wordpress Tooltips 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5.
CVE-2023-24388 1 Wpdevart 1 Booking Calendar 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions (create, duplicate, edit, delete).
CVE-2023-24380 1 Webbjocke 1 Simple Wp Sitemap 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: from n/a through 1.2.1.
CVE-2023-24377 1 Lightspeedhq 1 Ecwid Ecommerce Shopping Cart 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.3 versions.
CVE-2023-23992 1 Automatorwp 1 Automatorwp 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete.
CVE-2023-23984 1 Wow-company 1 Bubble Menu 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leading to form deletion.
CVE-2023-23974 1 Fullworksplugins 1 Quick Event Manager 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update).
CVE-2023-22689 1 Flamescorpion 1 Auto Affiliate Links 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3 versions.
CVE-2022-47177 1 Wpeasypay 1 Wp Easypay 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WP Easy Pay WP EasyPay – Square for WordPress plugin <= 4.1 versions.