Wordfence Intelligence   >   Search Results

Showing 381-400 of 410 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions
6.3
CVE-2021-4335
Apr 5, 2023
Researcher: Ram
WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery
6.3
CVE-2022-4938
Apr 5, 2023
Researcher: Chloe Chamberland
WCFM Marketplace <= 3.4.11 - Missing Authorization
8.8
CVE-2022-4935
Apr 5, 2023
Researcher: Chloe Chamberland
WCFM Membership <= 2.10.0 - Missing Authorization
7.3
CVE-2022-4940
Apr 5, 2023
Researcher: Chloe Chamberland
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
4.3
CVE-2023-25051
Apr 4, 2023
Researcher: Mika
Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-1840
Apr 4, 2023
Researcher: Marco Wotschka
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
6.6
CVE-2023-1021
Apr 4, 2023
Researcher: Shreya Pohekar
Libsyn Publisher Hub <= 1.3.2 - Sensitive Information Exposure
5.3
CVE-2023-25057
Apr 4, 2023
Researcher: yuyudhn
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-0924
Apr 4, 2023
Researcher: Yogesh Verma
Outdoor <= 3.9.6 - Reflected Cross-Site Scripting
6.1
CVE-2023-29236
Apr 4, 2023
Researcher: Vladislav Pokrovsky (ΞX.MI)
Advanced Custom Fields <= 6.0.7 - Authenticated (Contributor+) PHP Object Injection
8.8
CVE-2023-1196
Apr 3, 2023
Researcher: Nguyen Huu Do
Ajax Search Pro <= 4.26.1 - Reflected Cross-Site Scripting
6.1
CVE-2023-1435
Apr 3, 2023
Researcher: Erwan LR
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
9.8
CVE-2023-1020
Apr 3, 2023
Researchers: Simone Onofri, Donato Onofri
HT Builder <= 1.2.9 - Cross-Site Request Forgery via plugin_activation
4.3
CVE ID Unknown
Apr 3, 2023
Researchers:
WPCode <= 2.0.8 - Cross-Site Request Forgery
4.7
CVE-2023-1624
Apr 3, 2023
Researcher: Erwan LR
Product page shipping calculator for WooCommerce <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-29094
Apr 3, 2023
Researcher: Myungju Kim
Ajax Search Lite <= 4.11 - Reflected Cross-Site Scripting
7.2
CVE-2023-1420
Apr 3, 2023
Researcher: Erwan LR
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Manipulation
6.3
CVE-2023-1129
Apr 3, 2023
Researcher: Ameen Alkurdy
CopySafe Web Protection <= 3.13 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-29098
Apr 3, 2023
Researcher: Elliot
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2023-1126
Apr 3, 2023
Researcher: Ameen Alkurdy
Title CVE ID CVSS Researchers Date
Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions CVE-2021-4335 6.3 Ram April 5, 2023
WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery CVE-2022-4938 6.3 Chloe Chamberland April 5, 2023
WCFM Marketplace <= 3.4.11 - Missing Authorization CVE-2022-4935 8.8 Chloe Chamberland April 5, 2023
WCFM Membership <= 2.10.0 - Missing Authorization CVE-2022-4940 7.3 Chloe Chamberland April 5, 2023
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery CVE-2023-25051 4.3 Mika April 4, 2023
Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1840 4.4 Marco Wotschka April 4, 2023
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1021 6.6 Shreya Pohekar April 4, 2023
Libsyn Publisher Hub <= 1.3.2 - Sensitive Information Exposure CVE-2023-25057 5.3 yuyudhn April 4, 2023
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-0924 7.2 Yogesh Verma April 4, 2023
Outdoor <= 3.9.6 - Reflected Cross-Site Scripting CVE-2023-29236 6.1 Vladislav Pokrovsky (ΞX.MI) April 4, 2023
Advanced Custom Fields <= 6.0.7 - Authenticated (Contributor+) PHP Object Injection CVE-2023-1196 8.8 Nguyen Huu Do April 3, 2023
Ajax Search Pro <= 4.26.1 - Reflected Cross-Site Scripting CVE-2023-1435 6.1 Erwan LR April 3, 2023
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection CVE-2023-1020 9.8 Simone Onofri, Donato Onofri April 3, 2023
HT Builder <= 1.2.9 - Cross-Site Request Forgery via plugin_activation 4.3 April 3, 2023
WPCode <= 2.0.8 - Cross-Site Request Forgery CVE-2023-1624 4.7 Erwan LR April 3, 2023
Product page shipping calculator for WooCommerce <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-29094 4.4 Myungju Kim April 3, 2023
Ajax Search Lite <= 4.11 - Reflected Cross-Site Scripting CVE-2023-1420 7.2 Erwan LR April 3, 2023
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Manipulation CVE-2023-1129 6.3 Ameen Alkurdy April 3, 2023
CopySafe Web Protection <= 3.13 - Unauthenticated Stored Cross-Site Scripting CVE-2023-29098 7.2 Elliot April 3, 2023
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-1126 6.4 Ameen Alkurdy April 3, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation