Wordfence Intelligence   >   Search Results

Showing 61-80 of 453 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery
8.1
CVE-2023-0554
Jan 27, 2023
Researcher: Marco Wotschka
Customer Reviews for WooCommerce <= 5.15.0 - Authenticated (Subscriber+) Local File Inclusion
8.1
CVE-2023-0080
Jan 23, 2023
Researcher: István Márton
GPT AI Power <= 1.4.37 - Missing Authorization
8.1
CVE-2023-0405
Jan 19, 2023
Researcher: István Márton
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary File Deletion
8.1
CVE ID Unknown
Jan 18, 2023
Researcher: Patchstack
MainWP (Various extensions) - Missing Authorization to Arbitrary Page/Post Deletion
8.1
CVE ID Unknown
Jan 18, 2023
Researcher: Patchstack
MainWP File Uploader Extension <= 4.1 - Authenticated (Subscriber+) Arbitrary File Deletion
8.1
CVE-2023-23653
Jan 17, 2023
Researcher: Dave Jong
Correos Oficial <= 1.3.0.0 - Unauthenticated Arbitrary File Download
7.5
CVE-2023-0331
Jan 31, 2023
Researcher: Andrea Iodice
ContentStudio <= 1.2.5 - Information Exposure
7.5
CVE-2023-0557
Jan 27, 2023
Researcher: Chloe Chamberland
decode-uri-component <= 0.2.1 - Denial of Service
7.5
CVE-2022-38900
Jan 23, 2023
Researchers:
Olevmedia Shortcodes <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
7.4
CVE-2023-0168
Jan 26, 2023
Researcher: István Márton
YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
7.4
CVE-2022-4833
Jan 13, 2023
Researcher: István Márton
WP VR <= 8.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
7.4
CVE-2023-0174
Jan 12, 2023
Researcher: István Márton
Giveaways and Contests by RafflePress <= 1.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
7.4
CVE-2023-0176
Jan 12, 2023
Researcher: István Márton
Leaflet Maps Marker < 3.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
7.4
CVE-2022-4677
Jan 12, 2023
Researcher: István Márton
WP Blog and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
7.4
CVE-2022-4824
Jan 12, 2023
Researcher: István Márton
YourChannel <= 1.2.2 Authenticated (Contributor+) Cross-Site Scripting via Shortcode
7.4
CVE-2022-4833
Jan 10, 2023
Researcher: István Márton
Beautiful Cookie Consent Banner <= 2.10.0 - Missing Authorization to Settings Update
7.3
CVE ID Unknown
Jan 31, 2023
Researchers:
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-0278
Jan 31, 2023
Researchers: Daniel Krohmer, Kunal Sharma
Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-3388
Jan 31, 2023
Researchers:
Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection
7.2
CVE-2022-46803
Jan 27, 2023
Researcher: Mika
Title CVE ID CVSS Researchers Date
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery CVE-2023-0554 8.1 Marco Wotschka January 27, 2023
Customer Reviews for WooCommerce <= 5.15.0 - Authenticated (Subscriber+) Local File Inclusion CVE-2023-0080 8.1 István Márton January 23, 2023
GPT AI Power <= 1.4.37 - Missing Authorization CVE-2023-0405 8.1 István Márton January 19, 2023
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary File Deletion 8.1 Patchstack January 18, 2023
MainWP (Various extensions) - Missing Authorization to Arbitrary Page/Post Deletion 8.1 Patchstack January 18, 2023
MainWP File Uploader Extension <= 4.1 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2023-23653 8.1 Dave Jong January 17, 2023
Correos Oficial <= 1.3.0.0 - Unauthenticated Arbitrary File Download CVE-2023-0331 7.5 Andrea Iodice January 31, 2023
ContentStudio <= 1.2.5 - Information Exposure CVE-2023-0557 7.5 Chloe Chamberland January 27, 2023
decode-uri-component <= 0.2.1 - Denial of Service CVE-2022-38900 7.5 January 23, 2023
Olevmedia Shortcodes <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-0168 7.4 István Márton January 26, 2023
YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2022-4833 7.4 István Márton January 13, 2023
WP VR <= 8.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-0174 7.4 István Márton January 12, 2023
Giveaways and Contests by RafflePress <= 1.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-0176 7.4 István Márton January 12, 2023
Leaflet Maps Marker < 3.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2022-4677 7.4 István Márton January 12, 2023
WP Blog and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2022-4824 7.4 István Márton January 12, 2023
YourChannel <= 1.2.2 Authenticated (Contributor+) Cross-Site Scripting via Shortcode CVE-2022-4833 7.4 István Márton January 10, 2023
Beautiful Cookie Consent Banner <= 2.10.0 - Missing Authorization to Settings Update 7.3 January 31, 2023
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection CVE-2023-0278 7.2 Daniel Krohmer, Kunal Sharma January 31, 2023
Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting CVE-2023-3388 7.2 January 31, 2023
Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection CVE-2022-46803 7.2 Mika January 27, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation