Wordfence Intelligence   >   Search Results

Showing 81-100 of 641 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
EazyDocs <= 2.3.3 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-6035
Nov 20, 2023
Researcher: Dao Xuan Hieu
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
7.2
CVE-2023-47842
Nov 20, 2023
Researcher: Rafie Muhammad
Theme Editor <= 2.7.1 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-6091
Nov 20, 2023
Researcher: Dateoljo of BoB 12th
WP Githuber MD <= 1.16.2 - Authenticated (Author+) Arbitrary File Upload
8.8
CVE-2023-47846
Nov 20, 2023
Researcher: Rafie Muhammad
Link Whisper Free <= 0.6.5 - Authenticated (Contributor+) SQL Injection
8.8
CVE-2023-47852
Nov 20, 2023
Researcher: Muhammad Daffa
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
8.8
CVE-2023-6196
Nov 17, 2023
Researcher: Ala Arfaoui
AppPresser <= 4.2.5 - Insecure Password Reset Mechanism
8.1
CVE-2023-4214
Nov 16, 2023
Researcher: István Márton
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload
7.5
CVE-2023-6187
Nov 16, 2023
Researcher: István Márton
Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection
7.2
CVE ID Unknown
Nov 15, 2023
Researchers:
WP Courses LMS <= 3.2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
8.8
CVE ID Unknown
Nov 14, 2023
Researchers:
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload
7.2
CVE-2023-47784
Nov 14, 2023
Researcher: Rafie Muhammad
Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery
8.8
CVE ID Unknown
Nov 14, 2023
Researchers:
Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
8.8
CVE-2023-5953
Nov 14, 2023
Researcher: Benachi
Essential Grid <= 3.0.18 - Missing Authorization
8.3
CVE-2023-47771
Nov 14, 2023
Researcher: Rafie Muhammad
Thrive Theme Builder < 3.24.2 - Cross-Site Request Forgery
8.8
CVE-2023-47781
Nov 14, 2023
Researcher: Rafie Muhammad
Thrive Theme Builder < 3.24.0 - Privilege Escalation
8.8
CVE-2023-47782
Nov 14, 2023
Researcher: Rafie Muhammad
Thrive Theme Builder < 3.24.0 - Missing Authorization
8.3
CVE-2023-47783
Nov 14, 2023
Researcher: Rafie Muhammad
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-5108
Nov 13, 2023
Researcher: Karolis Narvilas
Image Compressor & Optimizer - iLoveIMG <= 1.0.5 - Authenticated (Administrator+) PHP Object Injection
7.2
CVE ID Unknown
Nov 13, 2023
Researchers:
Bus Ticket Booking with Seat Reservation <= 5.2.5 - Unauthenticated Cross-Site Scripting
7.2
CVE-2023-30496
Nov 13, 2023
Researcher: Ivy (TOOR, Lisa)
Title CVE ID CVSS Researchers Date
EazyDocs <= 2.3.3 - Authenticated (Subscriber+) SQL Injection CVE-2023-6035 8.8 Dao Xuan Hieu November 20, 2023
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload CVE-2023-47842 7.2 Rafie Muhammad November 20, 2023
Theme Editor <= 2.7.1 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6091 7.2 Dateoljo of BoB 12th November 20, 2023
WP Githuber MD <= 1.16.2 - Authenticated (Author+) Arbitrary File Upload CVE-2023-47846 8.8 Rafie Muhammad November 20, 2023
Link Whisper Free <= 0.6.5 - Authenticated (Contributor+) SQL Injection CVE-2023-47852 8.8 Muhammad Daffa November 20, 2023
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload CVE-2023-6196 8.8 Ala Arfaoui November 17, 2023
AppPresser <= 4.2.5 - Insecure Password Reset Mechanism CVE-2023-4214 8.1 István Márton November 16, 2023
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2023-6187 7.5 István Márton November 16, 2023
Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection 7.2 November 15, 2023
WP Courses LMS <= 3.2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update 8.8 November 14, 2023
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload CVE-2023-47784 7.2 Rafie Muhammad November 14, 2023
Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery 8.8 November 14, 2023
Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2023-5953 8.8 Benachi November 14, 2023
Essential Grid <= 3.0.18 - Missing Authorization CVE-2023-47771 8.3 Rafie Muhammad November 14, 2023
Thrive Theme Builder < 3.24.2 - Cross-Site Request Forgery CVE-2023-47781 8.8 Rafie Muhammad November 14, 2023
Thrive Theme Builder < 3.24.0 - Privilege Escalation CVE-2023-47782 8.8 Rafie Muhammad November 14, 2023
Thrive Theme Builder < 3.24.0 - Missing Authorization CVE-2023-47783 8.3 Rafie Muhammad November 14, 2023
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection CVE-2023-5108 7.2 Karolis Narvilas November 13, 2023
Image Compressor & Optimizer - iLoveIMG <= 1.0.5 - Authenticated (Administrator+) PHP Object Injection 7.2 November 13, 2023
Bus Ticket Booking with Seat Reservation <= 5.2.5 - Unauthenticated Cross-Site Scripting CVE-2023-30496 7.2 Ivy (TOOR, Lisa) November 13, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation