Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9189 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-32092 1 Peepso 1 Peepso 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin <= 6.0.9.0 versions.
CVE-2023-31235 1 Xnau 1 Participants Database 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.9 versions.
CVE-2023-31093 1 Chronosly-events-calendar Project 1 Chronosly-events-calendar 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Chronosly Chronosly Events Calendar plugin <= 2.6.2 versions.
CVE-2023-31088 1 Floating Action Button Project 1 Floating Action Button 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Faraz Quazi Floating Action Button plugin <= 1.2.1 versions.
CVE-2023-31087 1 Joomsky 1 Js Job Manager 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2023-31086 1 Ibenic 1 Simple Giveaways 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin <= 2.46.0 versions.
CVE-2023-31078 1 Browserupdate 1 Wp Browserupdate 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.4.1 versions.
CVE-2023-30478 1 Tribulant 1 Newsletters 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters plugin <= 4.8.8 versions.
CVE-2023-29440 1 Presstigers 1 Simple Job Board 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <= 2.10.3 versions.
CVE-2023-29428 1 Superbthemes 1 Superb Social Media Share Buttons And Follow Buttons 2026-04-28 5.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in SuPlugins Superb Social Media Share Buttons and Follow Buttons for WordPress plugin <= 1.1.3 versions.
CVE-2023-29426 1 Spreadshop 1 Spreadshop 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Robert Schulz (sprd.Net AG) Spreadshop plugin <= 1.6.5 versions.
CVE-2023-29235 1 Fugu 1 Maintenance Switch 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Fugu Maintenance Switch plugin <= 1.5.2 versions.
CVE-2023-25994 1 Publish To Schedule Project 1 Publish To Schedule 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.4.2 versions.
CVE-2023-25975 1 Etsy Shop Project 1 Etsy Shop 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Frédéric Sheedy Etsy Shop plugin <= 3.0.3 versions.
CVE-2023-23726 2 Tickera, Wordpress 2 Tickera, Wordpress 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affects Tickera: from n/a through 3.5.1.0.
CVE-2023-22674 1 Halgatewood 1 Dashicons \+ Custom Post Types 2026-04-28 5.4 Medium
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Hal Gatewood Dashicons + Custom Post Types.This issue affects Dashicons + Custom Post Types: from n/a through 1.0.2.
CVE-2022-47181 1 Wpexperts 1 Email Templates Customizer And Designer 2026-04-28 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cross Site Request Forgery.This issue affects Email Templates Customizer and Designer for WordPress and WooCommerce: from n/a through 1.4.2.
CVE-2022-45847 1 Wpassist 1 Countdown Widget 2026-04-28 6.1 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPAssist.Me WordPress Countdown Widget allows Cross-Site Scripting (XSS).This issue affects WordPress Countdown Widget: from n/a through 3.1.9.1.
CVE-2022-40219 1 Sedlex 1 Favicon-switcher 2026-04-28 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.
CVE-2026-41425 1 Authlib 1 Authlib 2026-04-28 5.4 Medium
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.