Wordfence Intelligence   >   Search Results

Showing 41-60 of 453 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
MainWP Google Analytics Extension <= 4.0.4 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-23651
Jan 17, 2023
Researcher: Dave Jong
Simple URLs <= 114 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0098
Jan 17, 2023
Researcher: dc11
WP Booklet <= 2.1.8 - Authenticated (Subscriber+) Remote Code Execution
8.8
CVE-2023-22677
Jan 13, 2023
Researcher: Le Ngoc Anh
ipBlockList <= 1.0 - Cross Site Request Forgery
8.8
CVE-2022-47147
Jan 13, 2023
Researcher: rezaduty
Dashicons + Custom Post Types <= 1.0.2 - Missing Authorization
8.8
CVE-2023-22674
Jan 13, 2023
Researcher: István Márton
Crayon Syntax Highlighter <= 2.8.4 - Cross-Site Request Forgery
8.8
CVE-2022-47167
Jan 13, 2023
Researcher: István Márton
Extra Block Design, Style, CSS for ANY Gutenberg Blocks <= 0.2.6 - Cross-Site Request Forgery
8.8
CVE-2022-47183
Jan 13, 2023
Researcher: Cat
Hover Image <= 1.4.1 - Cross-Site Request Forgery
8.8
CVE-2022-47611
Jan 13, 2023
Researcher: Mika
Universal Star Rating <= 2.1.0 - Cross-Site Request Forgery
8.8
CVE-2022-46867
Jan 13, 2023
Researcher: Mika
Superior FAQ <= 1.0.2 - Cross Site Request Forgery
8.8
CVE-2023-22678
Jan 13, 2023
Researcher: NeginNrb
eExamhall <= 4.0 - Cross Site Request Forgery
8.8
CVE-2023-22681
Jan 13, 2023
Researcher: NeginNrb
Mediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery
8.8
CVE-2022-47142
Jan 13, 2023
Researcher: Cat
Survey Maker < 3.1.2 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-23490
Jan 12, 2023
Researcher: Joshua Martinelle
User Meta Manager <= 3.4.9 - Cross Site Request Forgery
8.8
CVE-2023-23712
Jan 10, 2023
Researcher: thiennv
WPDating <= 7.4.1 - Arbitrary File Upload
8.8
CVE ID Unknown
Jan 9, 2023
Researchers:
JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection
8.6
CVE-2022-47151
Jan 27, 2023
Researcher: Vladislav Pokrovsky (ΞX.MI)
Reviews and Rating – Google My Business <= 4.14 - Missing Authorization
8.3
CVE-2023-23986
Jan 20, 2023
Researcher: István Márton
ContentStudio <= 1.2.5 - Authorization Bypass
8.2
CVE-2023-0558
Jan 27, 2023
Researcher: Chloe Chamberland
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery
8.1
CVE-2023-0554
Jan 27, 2023
Researcher: Marco Wotschka
Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference
8.1
CVE-2023-0550
Jan 27, 2023
Researcher: Marco Wotschka
Title CVE ID CVSS Researchers Date
MainWP Google Analytics Extension <= 4.0.4 - Authenticated (Subscriber+) SQL Injection CVE-2023-23651 8.8 Dave Jong January 17, 2023
Simple URLs <= 114 - Authenticated (Subscriber+) SQL Injection CVE-2023-0098 8.8 dc11 January 17, 2023
WP Booklet <= 2.1.8 - Authenticated (Subscriber+) Remote Code Execution CVE-2023-22677 8.8 Le Ngoc Anh January 13, 2023
ipBlockList <= 1.0 - Cross Site Request Forgery CVE-2022-47147 8.8 rezaduty January 13, 2023
Dashicons + Custom Post Types <= 1.0.2 - Missing Authorization CVE-2023-22674 8.8 István Márton January 13, 2023
Crayon Syntax Highlighter <= 2.8.4 - Cross-Site Request Forgery CVE-2022-47167 8.8 István Márton January 13, 2023
Extra Block Design, Style, CSS for ANY Gutenberg Blocks <= 0.2.6 - Cross-Site Request Forgery CVE-2022-47183 8.8 Cat January 13, 2023
Hover Image <= 1.4.1 - Cross-Site Request Forgery CVE-2022-47611 8.8 Mika January 13, 2023
Universal Star Rating <= 2.1.0 - Cross-Site Request Forgery CVE-2022-46867 8.8 Mika January 13, 2023
Superior FAQ <= 1.0.2 - Cross Site Request Forgery CVE-2023-22678 8.8 NeginNrb January 13, 2023
eExamhall <= 4.0 - Cross Site Request Forgery CVE-2023-22681 8.8 NeginNrb January 13, 2023
Mediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery CVE-2022-47142 8.8 Cat January 13, 2023
Survey Maker < 3.1.2 - Authenticated (Subscriber+) SQL Injection CVE-2023-23490 8.8 Joshua Martinelle January 12, 2023
User Meta Manager <= 3.4.9 - Cross Site Request Forgery CVE-2023-23712 8.8 thiennv January 10, 2023
WPDating <= 7.4.1 - Arbitrary File Upload 8.8 January 9, 2023
JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection CVE-2022-47151 8.6 Vladislav Pokrovsky (ΞX.MI) January 27, 2023
Reviews and Rating – Google My Business <= 4.14 - Missing Authorization CVE-2023-23986 8.3 István Márton January 20, 2023
ContentStudio <= 1.2.5 - Authorization Bypass CVE-2023-0558 8.2 Chloe Chamberland January 27, 2023
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery CVE-2023-0554 8.1 Marco Wotschka January 27, 2023
Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference CVE-2023-0550 8.1 Marco Wotschka January 27, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation