Wordfence Intelligence   >   Search Results

Showing 1-20 of 860 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode
8.8
CVE-2024-4670
May 14, 2024
Researcher: Ngô Thiên An (ancorn_)
Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode
6.4
CVE-2024-4392
May 13, 2024
Researcher: wesley (wcraft)
Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution
6.5
CVE-2024-4144
May 13, 2024
Researcher: stealthcopter
Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution
6.5
CVE-2024-4039
May 9, 2024
Researcher: stealthcopter
Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
6.4
CVE-2024-4567
May 8, 2024
Researcher: Francesco Carlucci
Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
8.8
CVE-2024-3808
May 8, 2024
Researcher: István Márton
Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution
6.5
CVE-2024-4038
May 7, 2024
Researcher: stealthcopter
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
6.4
CVE-2024-4281
May 7, 2024
Researcher: Krzysztof Zając
WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
5.4
CVE-2024-4135
May 7, 2024
Researcher: stealthcopter
Mesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode
6.4
CVE-2024-3494
May 7, 2024
Researcher: stealthcopter
Squelch Tabs and Accordions Shortcodes <= 0.4.7 - Cross-Site Request Forgery
4.3
CVE-2024-4463
May 7, 2024
Researcher: Benedictus Jovan (aillesiM)
Post Grid Master <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.4
CVE-2024-34390
May 6, 2024
Researcher: beluga
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter
6.4
CVE-2024-4446
May 6, 2024
Researcher: wesley (wcraft)
Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2024-4411
May 6, 2024
Researcher: Peter Thaleikis
Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2024-4383
May 3, 2024
Researcher: wesley (wcraft)
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
5.3
CVE-2024-3916
May 3, 2024
Researcher: Francesco Carlucci
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution
9.1
CVE-2024-34434
May 3, 2024
Researcher: stealthcopter
Post Grid Master <= 3.4.7 - Missing Authorization
5.3
CVE-2024-34372
May 3, 2024
Researcher: Dhabaleshwar Das
WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
6.4
CVE-2024-3490
May 1, 2024
Researcher: stealthcopter
Follow Us Badges <= 3.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsite_follow_us_badges Shortcode
6.4
CVE-2024-3280
May 1, 2024
Researcher: Lucio Sá
Title CVE ID CVSS Researchers Date
All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode CVE-2024-4670 8.8 Ngô Thiên An (ancorn_) May 14, 2024
Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode CVE-2024-4392 6.4 wesley (wcraft) May 13, 2024
Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-4144 6.5 stealthcopter May 13, 2024
Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-4039 6.5 stealthcopter May 9, 2024
Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode CVE-2024-4567 6.4 Francesco Carlucci May 8, 2024
Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode CVE-2024-3808 8.8 István Márton May 8, 2024
Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-4038 6.5 stealthcopter May 7, 2024
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode CVE-2024-4281 6.4 Krzysztof Zając May 7, 2024
WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVE-2024-4135 5.4 stealthcopter May 7, 2024
Mesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode CVE-2024-3494 6.4 stealthcopter May 7, 2024
Squelch Tabs and Accordions Shortcodes <= 0.4.7 - Cross-Site Request Forgery CVE-2024-4463 4.3 Benedictus Jovan (aillesiM) May 7, 2024
Post Grid Master <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-34390 5.4 beluga May 6, 2024
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter CVE-2024-4446 6.4 wesley (wcraft) May 6, 2024
Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-4411 6.4 Peter Thaleikis May 6, 2024
Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-4383 6.4 wesley (wcraft) May 3, 2024
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes CVE-2024-3916 5.3 Francesco Carlucci May 3, 2024
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-34434 9.1 stealthcopter May 3, 2024
Post Grid Master <= 3.4.7 - Missing Authorization CVE-2024-34372 5.3 Dhabaleshwar Das May 3, 2024
WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode CVE-2024-3490 6.4 stealthcopter May 1, 2024
Follow Us Badges <= 3.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsite_follow_us_badges Shortcode CVE-2024-3280 6.4 Lucio Sá May 1, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation