Export limit exceeded: 10195 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10195 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-36890 1 Supsystic 1 Social Share Buttons 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress.
CVE-2022-29437 1 Nextcode 1 Image Slider By Nextcode 2025-02-20 5.4 Medium
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress.
CVE-2022-29453 1 Ayecode 1 Api Key For Google Maps 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in API KEY for Google Maps plugin <= 1.2.1 at WordPress leading to Google Maps API key update.
CVE-2022-29439 1 Nextcode 1 Image Slider By Nextcode 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting slides.
CVE-2022-29441 1 Private Messages Project 1 Private Messages 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.
CVE-2021-36891 1 Supsystic 1 Photo Gallery 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings.
CVE-2022-29454 1 Wordplus 1 Better Messages 2025-02-20 3.1 Low
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
CVE-2022-32289 1 Sygnoos 1 Popup Builder 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.0 at WordPress leading to popup status change.
CVE-2022-30337 1 Joomunited 1 Wp Meta Seo 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in JoomUnited WP Meta SEO plugin <= 4.4.8 at WordPress allows an attacker to update the social settings.
CVE-2022-29495 1 Sygnoos 1 Popup Builder 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.11 at WordPress allows an attacker to update plugin settings.
CVE-2021-36861 1 Starfish 1 Rich Review 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an attacker to delete reviews.
CVE-2021-36852 1 Thimpress 1 Wp Hotel Booking 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.
CVE-2022-36346 1 Maxfoundry 1 Maxbuttons 2025-02-20 4.3 Medium
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress.
CVE-2022-36292 1 Wpchill 1 Gallery Photoblocks 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.
CVE-2022-36389 1 Wordplus 1 Better Messages 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress.
CVE-2022-36358 1 Seoscout 1 Seo Scout 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in SEO Scout plugin <= 0.9.83 at WordPress allows attackers to trick users with administrative rights to unintentionally change the plugin settings.
CVE-2022-36373 1 Mp3-jplayer Project 1 Mp3-jplayer 2025-02-20 5.4 Medium
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress.
CVE-2022-36796 1 Callrail 1 Callrail Phone Call Tracking 2025-02-20 6.1 Medium
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at WordPress.
CVE-2022-33177 1 Wpbookingcalendar 1 Booking Calendar 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update.
CVE-2022-38059 1 Access Code Feeder Project 1 Access Code Feeder 2025-02-20 5.5 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Alexey Trofimov's Access Code Feeder plugin <= 1.0.3 at WordPress.