Wordfence Intelligence   >   Search Results

Showing 81-100 of 1977 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
Essential Real Estate <= 4.3.5 - Missing Authorization to Stored Cross-Site Scripting
6.4
CVE-2023-6141
Dec 18, 2023
Researcher: Krzysztof Zając
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode
6.1
CVE-2023-6882
Dec 18, 2023
Researcher: Rein Daelman (trein)
WP Google Maps <= 9.0.27 - Unauthenticated Stored Cross-Site Scripting via REST API
6.1
CVE-2023-6627
Dec 18, 2023
Researcher: Marc-Alexandre Montpas
Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting
4.7
CVE-2023-6737
Dec 18, 2023
Researcher: Nex Team
AMP for WP – Accelerated Mobile Pages <= 1.0.92 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
6.4
CVE-2023-6782
Dec 18, 2023
Researcher: Ngô Thiên An (ancorn_)
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.4
CVE-2023-6488
Dec 18, 2023
Researcher: Webbernaut
Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-5413
Dec 16, 2023
Researcher: István Márton
Jquery news ticker <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-5432
Dec 16, 2023
Researcher: István Márton
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting
6.4
CVE-2023-6645
Dec 15, 2023
Researcher: Rafshanzani Suhada
Email Subscription Popup <= 1.2.19 - Reflected Cross-Site Scripting
6.1
CVE-2023-6555
Dec 15, 2023
Researcher: Erwan LR
Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text
6.4
CVE-2023-6561
Dec 14, 2023
Researcher: Webbernaut
WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2023-6161
Dec 13, 2023
Researcher: Enrico Marcolini
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
4.9
CVE-2023-6624
Dec 11, 2023
Researcher: Rafshanzani Suhada
WP TripAdvisor Review Slider <= 11.8 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-6037
Dec 11, 2023
Researcher: Felipe Restrepo Rodriguez (pfelilpe)
Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2023-6000
Dec 11, 2023
Researcher: Marc-Alexandre Montpas
SlickNav Mobile Menu <= 1.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-51548
Dec 9, 2023
Researcher: Mika
Html5 Video Player <= 2.5.18 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-6485
Dec 8, 2023
Researcher: Krzysztof Zając
Ibtana – WordPress Website Builder <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-6684
Dec 7, 2023
Researcher: István Márton
Alma – Pay in installments or later for WooCommerce <= 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-50369
Dec 7, 2023
Researcher: Ngô Thiên An (ancorn_)
WP Project Manager <= 2.6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2023-49860
Dec 7, 2023
Researcher: lttn
Title CVE ID CVSS Researchers Date
Essential Real Estate <= 4.3.5 - Missing Authorization to Stored Cross-Site Scripting CVE-2023-6141 6.4 Krzysztof Zając December 18, 2023
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode CVE-2023-6882 6.1 Rein Daelman (trein) December 18, 2023
WP Google Maps <= 9.0.27 - Unauthenticated Stored Cross-Site Scripting via REST API CVE-2023-6627 6.1 Marc-Alexandre Montpas December 18, 2023
Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting CVE-2023-6737 4.7 Nex Team December 18, 2023
AMP for WP – Accelerated Mobile Pages <= 1.0.92 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode CVE-2023-6782 6.4 Ngô Thiên An (ancorn_) December 18, 2023
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6488 5.4 Webbernaut December 18, 2023
Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5413 6.4 István Márton December 16, 2023
Jquery news ticker <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5432 6.4 István Márton December 16, 2023
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting CVE-2023-6645 6.4 Rafshanzani Suhada December 15, 2023
Email Subscription Popup <= 1.2.19 - Reflected Cross-Site Scripting CVE-2023-6555 6.1 Erwan LR December 15, 2023
Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text CVE-2023-6561 6.4 Webbernaut December 14, 2023
WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting CVE-2023-6161 6.1 Enrico Marcolini December 13, 2023
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-6624 4.9 Rafshanzani Suhada December 11, 2023
WP TripAdvisor Review Slider <= 11.8 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-6037 4.4 Felipe Restrepo Rodriguez (pfelilpe) December 11, 2023
Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting CVE-2023-6000 6.1 Marc-Alexandre Montpas December 11, 2023
SlickNav Mobile Menu <= 1.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-51548 4.4 Mika December 9, 2023
Html5 Video Player <= 2.5.18 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-6485 4.4 Krzysztof Zając December 8, 2023
Ibtana – WordPress Website Builder <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-6684 6.4 István Márton December 7, 2023
Alma – Pay in installments or later for WooCommerce <= 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-50369 6.4 Ngô Thiên An (ancorn_) December 7, 2023
WP Project Manager <= 2.6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-49860 6.4 lttn December 7, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation