Export limit exceeded: 344151 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

You must be logged in to use the 'userTag' filter.
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (344151 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2015-9500 1 Exquisite Ultimate Newspaper Project 1 Exquisite Ultimate Newspaper 2024-11-21 6.1 Medium
The Exquisite Ultimate Newspaper theme 1.3.3 for WordPress has XSS via the anchor identifier to assets/js/jquery.foundation.plugins.js.
CVE-2015-9499 1 Themepunch 1 Showbiz Pro 2024-11-21 9.8 Critical
The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.
CVE-2015-9498 1 Wpserveur 1 Wps Hide Login 2024-11-21 8.8 High
The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.
CVE-2015-9497 1 Ad Inserter Project 1 Ad Inserter 2024-11-21 8.8 High
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.
CVE-2015-9496 1 Freshmail 1 Freshmail-newsletter 2024-11-21 8.8 High
The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.
CVE-2015-9495 1 Syndication Links Project 1 Syndication Links 2024-11-21 6.1 Medium
The syndication-links plugin before 1.0.3 for WordPress has XSS via the genericons/example.html anchor identifier.
CVE-2015-9494 1 Indieweb Post Kinds Project 1 Indieweb Post Kinds 2024-11-21 6.1 Medium
The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.
CVE-2015-9493 1 Nlb-creationst 1 My Wish List 2024-11-21 6.1 Medium
The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues.
CVE-2015-9492 1 Smartit Premium Responsive Project 1 Smartit Premium Responsive 2024-11-21 7.5 High
The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9491 1 Blessing Premium Responsive Project 1 Blessing Premium Responsive 2024-11-21 7.5 High
The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9490 1 Gamestheme Premium Project 1 Gamestheme Premium 2024-11-21 7.5 High
The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9489 1 Goodnex Premium Responsive Project 1 Goodnex Premium Responsive 2024-11-21 7.5 High
The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9488 1 Almera Responsive Portfolio Site Template Project 1 Almera Responsive Portfolio Site Template 2024-11-21 7.5 High
The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9487 1 Almera Responsive Portfolio Project 1 Almera Responsive Portfolio 2024-11-21 7.5 High
The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9486 1 Axioma Premium Responsive Project 1 Axioma Premium Responsive 2024-11-21 7.5 High
The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9485 1 Accio Responsive Onepage Parallax Site Template Project 1 Accio Responsive Onepage Parallax Site Template 2024-11-21 7.5 High
The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9484 1 Accio One Page Parallax Responsive Theme Project 1 Accio One Page Parallax Responsive Theme 2024-11-21 7.5 High
The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9483 1 Invento \/ Architecture Building Agency Template Project 1 Invento \/ Architecture Building Agency Template 2024-11-21 7.5 High
The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9482 1 Car Dealer \/ Auto Dealer Responsive Project 1 Car Dealer \/ Auto Dealer Responsive 2024-11-21 7.5 High
The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9481 1 Diplomat \| Political Project 1 Diplomat \| Political 2024-11-21 7.5 High
The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.