|
cve-2024-13365
|
cleantalk security_\&_malware_scan Unrestricted Upload of File with Dangerous Type |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-05-05 |
|
cve-2024-11350
|
scriptsbundle adforest Weak Password Recovery Mechanism for Forgotten Password |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-05 |
|
cve-2024-11349
|
scriptsbundle adforest Authentication Bypass Using an Alternate Path or Channel |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-05 |
|
cve-2026-3296
|
WPEverest everest_forms Deserialization of Untrusted Data |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2026-2931
|
tms-outsource amelia Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-9807
|
StellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-7340
|
HasThemes download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-64377
|
cridio listingpro Improper Control of Filename for Include/Require Statement in PHP Program |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-5339
|
scripteo ads_pro Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-4606
|
Unverified Password Change |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-3278
|
Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-15403
|
metagauss registrationmagic Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2025-11307
|
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an ... |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-10-19 |
|
cve-2024-8420
|
sitesao dhvc_form Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-6028
|
ays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-4845
|
icegram icegram_express Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-4346
|
web-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-31286
|
wppa wp_photo_album_plus Unrestricted Upload of File with Dangerous Type |
CRITICAL
|
9.9
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-2879
|
kreaturamedia layerslider Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-13744
|
booster booster_for_woocommerce Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-13448
|
ThemeREX addons Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-13421
|
contempothemes real_estate_7 Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2024-12281
|
Favethemes homey Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2023-5822
|
CodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2023-47783
|
thrivethemes thrive_themes_builder Missing Authorization |
HIGH
|
8.3
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2023-2745
|
WordPress wordpress Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2022-1281
|
10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2022-0633
|
updraftplus updraftplus Incorrect Authorization |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-04 |
|
cve-2026-31431
|
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-05-01 |
|
cve-2025-60021
|
Apache brpc Improper Neutralization of Special Elements used in a Command |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2026-05-01 |
ndaal KEV