Wordfence Intelligence   >   Search Results

Showing 41-60 of 410 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
Viable blog <= 1.1.4 - Cross-Site Scripting
6.1
CVE-2023-27419
Apr 25, 2023
Researcher: László Radnai
Shield Security <= 17.0.17 - Missing Authorization
4.3
CVE-2023-0993
Apr 25, 2023
Researcher: Ram
Arya Multipurpose <= 1.0.5 - Reflected Cross-Site Scripting
6.1
CVE-2023-27420
Apr 25, 2023
Researcher: László Radnai
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Shortcode Deletion
5.4
CVE-2023-2271
Apr 25, 2023
Researcher: Erwan LR
REST API TO MiniProgram <= 4.6.8 - Authenticated (Subscriber+) Media Attachment Deletion
6.4
CVE-2023-0551
Apr 25, 2023
Researcher: István Márton
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
5.4
CVE-2023-0058
Apr 25, 2023
Researcher: Shreya Pohekar
Tiempo.com <= 0.1.2 - Reflected Cross-Site Scripting
6.1
CVE-2023-2272
Apr 25, 2023
Researcher: Erwan LR
Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-0992
Apr 25, 2023
Researcher: Ram
URL Params <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-0274
Apr 25, 2023
Researcher: István Márton
Video XML Sitemap Generator <= 1.0.0 - Cross-Site Request Forgery via video_sitemap_generate
4.3
CVE-2023-31089
Apr 24, 2023
Researcher: Mika
Updraft <= 0.6.1 - Reflected Cross-Site Scripting via 'backup_timestamp'
6.1
CVE-2023-26530
Apr 24, 2023
Researcher: Nguyen Xuan Hoa
Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated (Subscriber+) SQL Injection via id
8.8
CVE-2023-30495
Apr 24, 2023
Researcher: Ivy (TOOR, Lisa)
Advanced Youtube Channel Pagination <= 1.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
5.5
CVE-2023-28693
Apr 24, 2023
Researcher: qilin_99
WP BrowserUpdate <= 4.4.1 - Cross-Site Request Forgery via wpbu_administration
4.3
CVE-2023-31078
Apr 24, 2023
Researcher: qilin_99
Forms Ada <= 1.0 - Reflected Cross-Site Scripting via 'p' parameter
6.1
CVE-2023-27613
Apr 24, 2023
Researcher: Pavak Tiwari
NS Coupon to Become Customer <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
4.4
CVE-2023-27422
Apr 24, 2023
Researcher: Pavitra Tiwari
WP Page Numbers <= 0.5 - Cross-Site Request Forgery via wp_page_numbers_settings
4.3
CVE-2023-27623
Apr 24, 2023
Researcher: Abdi Pranata
Arconix Shortcodes <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
6.4
CVE-2023-23703
Apr 24, 2023
Researcher: István Márton
BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby'
7.2
CVE-2023-30872
Apr 24, 2023
Researcher: TomS
XML for Google Merchant Center <= 3.0.1 - Reflected Cross-Site Scripting via page parameter
6.1
CVE-2023-30877
Apr 24, 2023
Researcher: LEE SE HYOUNG
Title CVE ID CVSS Researchers Date
Viable blog <= 1.1.4 - Cross-Site Scripting CVE-2023-27419 6.1 László Radnai April 25, 2023
Shield Security <= 17.0.17 - Missing Authorization CVE-2023-0993 4.3 Ram April 25, 2023
Arya Multipurpose <= 1.0.5 - Reflected Cross-Site Scripting CVE-2023-27420 6.1 László Radnai April 25, 2023
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Shortcode Deletion CVE-2023-2271 5.4 Erwan LR April 25, 2023
REST API TO MiniProgram <= 4.6.8 - Authenticated (Subscriber+) Media Attachment Deletion CVE-2023-0551 6.4 István Márton April 25, 2023
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2023-0058 5.4 Shreya Pohekar April 25, 2023
Tiempo.com <= 0.1.2 - Reflected Cross-Site Scripting CVE-2023-2272 6.1 Erwan LR April 25, 2023
Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting CVE-2023-0992 7.2 Ram April 25, 2023
URL Params <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-0274 6.4 István Márton April 25, 2023
Video XML Sitemap Generator <= 1.0.0 - Cross-Site Request Forgery via video_sitemap_generate CVE-2023-31089 4.3 Mika April 24, 2023
Updraft <= 0.6.1 - Reflected Cross-Site Scripting via 'backup_timestamp' CVE-2023-26530 6.1 Nguyen Xuan Hoa April 24, 2023
Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated (Subscriber+) SQL Injection via id CVE-2023-30495 8.8 Ivy (TOOR, Lisa) April 24, 2023
Advanced Youtube Channel Pagination <= 1.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting CVE-2023-28693 5.5 qilin_99 April 24, 2023
WP BrowserUpdate <= 4.4.1 - Cross-Site Request Forgery via wpbu_administration CVE-2023-31078 4.3 qilin_99 April 24, 2023
Forms Ada <= 1.0 - Reflected Cross-Site Scripting via 'p' parameter CVE-2023-27613 6.1 Pavak Tiwari April 24, 2023
NS Coupon to Become Customer <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings CVE-2023-27422 4.4 Pavitra Tiwari April 24, 2023
WP Page Numbers <= 0.5 - Cross-Site Request Forgery via wp_page_numbers_settings CVE-2023-27623 4.3 Abdi Pranata April 24, 2023
Arconix Shortcodes <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-23703 6.4 István Márton April 24, 2023
BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby' CVE-2023-30872 7.2 TomS April 24, 2023
XML for Google Merchant Center <= 3.0.1 - Reflected Cross-Site Scripting via page parameter CVE-2023-30877 6.1 LEE SE HYOUNG April 24, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation