Search
98,198 CVEs
EOL hidden · Show all products
CVEs (98,198, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 98,198 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2025-62827 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62828 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62829 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62830 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62831 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62832 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62833 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62834 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-62835 | NONE | — | 2025-10-24 | Rejected reason: Not used | |
| CVE-2025-10723 | LOW | Patched | 2.7 | 2025-10-24 | The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to per… |
| CVE-2025-10874 | MEDIUM | Patched | 5.5 | 2025-10-24 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock… |
| CVE-2025-58070 | MEDIUM | 6.1 | 2025-10-24 | Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's we… | |
| CVE-2025-61931 | MEDIUM | 5.4 | 2025-10-24 | Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in us… | |
| CVE-2025-9158 | MEDIUM | — | 2025-10-24 | The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML sanitization. X… | |
| CVE-2025-9978 | MEDIUM | Patched | 6.8 | 2025-10-24 | The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vulnerability. |
| CVE-2025-62868 | HIGH | 8.1 | 2025-10-24 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusio… | |
| CVE-2025-6440 | CRITICAL | 9.8 | 2025-10-24 | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to m… | |
| CVE-2025-10701 | MEDIUM | 6.4 | 2025-10-24 | The Time Clock – A WordPress Employee & Volunteer Time Clock Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up t… | |
| CVE-2025-10740 | MEDIUM | 6.3 | 2025-10-24 | The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on t… | |
| CVE-2025-10748 | MEDIUM | 6.5 | 2025-10-24 | The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2. This is due to insufficient escaping on… | |
| CVE-2025-10749 | MEDIUM | 5.4 | 2025-10-24 | The Microsoft Azure Storage for WordPress plugin for WordPress is vulnerable to Unauthorized Arbitrary Media Deletion in all versions up to, and including, 4.5.1. This is d… | |
| CVE-2025-10901 | MEDIUM | 4.3 | 2025-10-24 | The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ai_get_table' function in all vers… | |
| CVE-2025-10902 | MEDIUM | 4.3 | 2025-10-24 | The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ai_scan_result_remove' function in a… | |
| CVE-2025-11172 | MEDIUM | 4.3 | 2025-10-24 | The Check Plagiarism plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the chk_plag_mine_plugin_wpse10500_admin_a… | |
| CVE-2025-11253 | CRITICAL | 9.8 | 2025-10-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affe… |