Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

98,288 CVEs

CVEs (98,288, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 201–225 of 98,288 (capped at 500)

CVE ID Severity Patch CVSS Published ↑ Description
CVE-2025-62920 MEDIUM 5.9 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webnique USERCENTRICS CMP usercentrics-consent-management-platform all…
CVE-2025-62921 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Bulk Auto Image Title Attribute bulk-image-title-attribute allow…
CVE-2025-62922 MEDIUM 5.3 2025-10-27 Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionality Not Properly Constrained by ACLs.This issue affect…
CVE-2025-62923 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Debuggers Studio Marquee Addons for Elementor marquee-addons-for-eleme…
CVE-2025-62924 MEDIUM 6.5 2025-10-27 Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2025-62925 MEDIUM 5.4 2025-10-27 Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security L…
CVE-2025-62927 MEDIUM 6.5 2025-10-27 Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-62928 MEDIUM 4.3 2025-10-27 Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-description-updater allows Exploiting Incorrectly Configured Access Control Securit…
CVE-2025-62929 MEDIUM 6.5 2025-10-27 Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-62930 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based …
CVE-2025-62931 MEDIUM 4.3 2025-10-27 Missing Authorization vulnerability in microsoftstart MSN Partner Hub microsoft-start allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…
CVE-2025-62932 MEDIUM 4.3 2025-10-27 Missing Authorization vulnerability in wprio Table Block by RioVizual riovizual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects T…
CVE-2025-62933 HIGH 7.1 2025-10-27 Cross-Site Request Forgery (CSRF) vulnerability in Prakash Awesome Testimonials awesome-testimonials allows Stored XSS.This issue affects Awesome Testimonials: from n/a thr…
CVE-2025-62934 HIGH 7.1 2025-10-27 Cross-Site Request Forgery (CSRF) vulnerability in Mejar WP Business Hours wp-business-hours allows Stored XSS.This issue affects WP Business Hours: from n/a through <= 1.4.
CVE-2025-62935 MEDIUM 4.3 2025-10-27 Missing Authorization vulnerability in StackWC Open Close WooCommerce Store woc-open-close allows Exploiting Incorrectly Configured Access Control Security Levels.This issu&hellip;
CVE-2025-62936 MEDIUM 4.3 2025-10-27 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n&hellip;
CVE-2025-62937 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johnny Post List Featured Image post-list-featured-image allows Stored&hellip;
CVE-2025-62938 MEDIUM 4.3 2025-10-27 Missing Authorization vulnerability in Reoon Technology Reoon Email Verifier reoon-email-verifier allows Exploiting Incorrectly Configured Access Control Security Levels.Th&hellip;
CVE-2025-62939 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Open Currency Converter artiss-currency-converter allows Stored XS&hellip;
CVE-2025-62940 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Diego Blox Lite blox-lite allows Stored XSS.This issue affects Bl&hellip;
CVE-2025-62941 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This &hellip;
CVE-2025-62942 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tempranova WP Mapbox GL JS Maps wp-mapbox-gl-js allows Stored XSS.This&hellip;
CVE-2025-62943 MEDIUM 6.5 2025-10-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt McInvale Next Page, Not Next Post next-page-not-next-post allows &hellip;
CVE-2025-62944 MEDIUM 5.3 2025-10-27 Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue&hellip;
CVE-2025-62945 HIGH 7.1 2025-10-27 Cross-Site Request Forgery (CSRF) vulnerability in Eduard Pinuaga Linares Did Prestashop Display did-prestashop-display allows Stored XSS.This issue affects Did Prestashop &hellip;