Search

Expected end of text, found '.' (at char 11), (line:1, col:12)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (346532 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-27428 1 Wordpress 1 Wordpress 2026-04-23 5.4 Medium
Missing Authorization vulnerability in DamirCalusic WP users media wp-users-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP users media: from n/a through <= 4.2.3.
CVE-2023-26522 1 Onewebsite 1 Wp Repost 2026-04-23 6.5 Medium
Missing Authorization vulnerability in OneWebsite WP Repost wp-repost allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Repost: from n/a through <= 0.1.
CVE-2023-26520 1 Advanced Text Widget Project 1 Advanced Text Widget 2026-04-23 5.3 Medium
Missing Authorization vulnerability in Max Chirkov Advanced Text Widget advanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through <= 2.1.2.
CVE-2023-26005 2026-04-23 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Fitrush bw-fitrush allows PHP Local File Inclusion.This issue affects Fitrush: from n/a through <= 1.3.4.
CVE-2023-26003 2026-04-23 7.6 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vipul Jariwala WP Post Corrector wp-post-corrector allows SQL Injection.This issue affects WP Post Corrector: from n/a through <= 1.0.2.
CVE-2023-26002 1 Wordpress 1 Wordpress 2026-04-23 4.3 Medium
Missing Authorization vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 6Storage Rentals: from n/a through <= 2.22.0.
CVE-2023-26001 2026-04-23 5.9 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marchetti Design Next Event Calendar next-event-calendar allows Stored XSS.This issue affects Next Event Calendar: from n/a through <= 1.2.
CVE-2023-26000 1 Wordpress 1 Wordpress 2026-04-23 5.9 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hanhdo205 Bang tinh vay bang-tinh-lai-suat allows Stored XSS.This issue affects Bang tinh vay: from n/a through <= 1.0.1.
CVE-2023-25999 2026-04-23 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme BodyCenter - Gym, Fitness WooCommerce WordPress Theme bodycenter allows PHP Local File Inclusion.This issue affects BodyCenter - Gym, Fitness WooCommerce WordPress Theme: from n/a through <= 2.4.
CVE-2023-25998 2026-04-23 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme samex allows PHP Local File Inclusion.This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through <= 2.6.
CVE-2023-25997 2026-04-23 6.5 Medium
Missing Authorization vulnerability in SolaPlugins Sola Support Ticket sola-support-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sola Support Ticket: from n/a through <= 3.18.
CVE-2023-25995 2026-04-23 7.5 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in choicehomemortgage AI Mortgage Calculator ai-mortgage-calculator allows PHP Local File Inclusion.This issue affects AI Mortgage Calculator: from n/a through <= 1.0.1.
CVE-2023-25993 2 Webberzone, Wordpress 2 Top 10, Wordpress 2026-04-23 4.3 Medium
Missing Authorization vulnerability in Ajay Top 10 top-10 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top 10: from n/a through <= 3.2.3.
CVE-2023-25988 2026-04-23 7.5 High
Missing Authorization vulnerability in totalsoft Video Gallery – YouTube Gallery gallery-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Gallery – YouTube Gallery: from n/a through <= 1.7.6.
CVE-2023-25966 1 Ninjateam 1 Filebird 2026-04-23 5.5 Medium
Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 5.1.4.
CVE-2023-25959 2 Apollo13themes, Wordpress 2 Apollo13 Framework Extensions, Wordpress 2026-04-23 5.4 Medium
Missing Authorization vulnerability in apollo13themes Apollo13 Framework Extensions apollo13-framework-extensions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apollo13 Framework Extensions: from n/a through <= 1.8.10.
CVE-2023-25791 1 Wordpress 1 Wordpress 2026-04-23 5.4 Medium
Missing Authorization vulnerability in caduspro Fontiran fontiran allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fontiran: from n/a through <= 2.1.
CVE-2023-25714 1 Fullworksplugins 1 Quick Paypal Payments 2026-04-23 7.5 High
Missing Authorization vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through <= 5.7.25.
CVE-2023-25703 1 Essentialplugin 1 Meta Slider And Carousel With Lightbox 2026-04-23 5.3 Medium
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox meta-slider-and-carousel-with-lightbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta slider and carousel with lightbox: from n/a through <= 1.6.2.
CVE-2023-25486 1 Wordpress 1 Wordpress 2026-04-23 4.3 Medium
Missing Authorization vulnerability in migrate Clone wp-clone-by-wp-academy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through <= 2.3.7.