Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.
Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.
Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124.