Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WordPress Plugin Theme Editor Multiple Vulnerabilities (2.1) CWE-352 CWE-434 CWE-352 CWE-434 High WordPress Plugin ThemeGrill Demo Importer Cross-Site Request Forgery (1.6.2) CWE-352 CWE-352 High WordPress Plugin ThemeGrill Demo Importer Security Bypass (1.6.1) CWE-264 CWE-264 High WordPress Plugin ThemeHigh WooCommerce Wishlist and Comparison Cross-Site Request Forgery (1.0.4) CWE-352 CWE-352 High WordPress Plugin Theme My Login 'instance' Parameter Cross-Site Scripting (6.1.4) CWE-79 CWE-79 High WordPress Plugin Theme My Login Local File Inclusion (6.3.9) CVE-2014-5155 CWE-22 CWE-22 High WordPress Plugin Theme My Login Security Bypass (6.4.6) CWE-264 CWE-264 High WordPress Plugin ThemeREX Addons Remote Code Execution (All) CVE-2020-10257 CWE-94 CWE-94 High WordPress Plugin Theme Test Drive Multiple Vulnerabilities (2.9) CWE-79 CWE-434 CWE-79 CWE-434 High WordPress Plugin Theme Tuner 'tt-abspath' Parameter Remote File Include (0.7) CVE-2012-0934 CWE-94 CWE-94 High WordPress Plugin Theme Tweaker Cross-Site Request Forgery (5.20) CVE-2023-23713 CWE-352 CWE-352 High WordPress Plugin Themify-WooCommerce Product Filter SQL Injection (1.4.9) CVE-2024-6027 CWE-89 CWE-89 High WordPress Plugin Themify Builder Cross-Site Scripting (5.3.1) CWE-79 CWE-79 High WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.1.5) CVE-2021-24129 CWE-79 CWE-79 High WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.1.6) CVE-2022-0200 CWE-79 CWE-79 High WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.1.9) CWE-79 CWE-79 High WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.2.0) CVE-2022-4464 CWE-79 CWE-79 High WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.2.1) CVE-2023-0362 CWE-79 CWE-79 High WordPress Plugin The Official Facebook Chat Cross-Site Request Forgery (1.2) CWE-352 CWE-352 High WordPress Plugin The Official Facebook Chat Security Bypass (1.5) CWE-264 CWE-264 High WordPress Plugin The Piecemaker 'php.php' Arbitrary File Upload (1.1) CWE-434 CWE-434 High WordPress Plugin The Plus Addons for Elementor Cross-Site Scripting (4.1.11) CVE-2021-24351 CWE-79 CWE-79 High WordPress Plugin The Plus Addons for Elementor Open Redirect (4.1.9) CVE-2021-24358 CWE-601 CWE-601 High WordPress Plugin The Plus Addons for Elementor Page Builder Lite Multiple Cross-Site Scripting Vulnerabilities (2.0.5) CVE-2021-24266 CWE-79 CWE-79 High WordPress Plugin The Plus Addons for Elementor Security Bypass (4.1.6) CVE-2021-24175 CWE-264 CWE-264 High WordPress Plugin The Plus Addons for Elementor Security Bypass (4.1.10) CVE-2021-24359 CWE-264 CWE-264 High WordPress Plugin The Post Grid-Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery (5.0.4) CVE-2022-46853 CWE-352 CWE-352 High WordPress Plugin The Sorter SQL Injection (1.0) CVE-2021-24399 CWE-89 CWE-89 High WordPress Plugin TheThe Layout Grid Cross-Site Scripting (1.0.0) CVE-2013-1808 CWE-79 CWE-79 High WordPress Plugin The Welcomizer 'twiz-index.php' Cross-Site Scripting (1.3.9.4) CWE-79 CWE-79 High WordPress Plugin ThinkIT WP Contact Form Multiple Vulnerabilities (0.2) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin ThinkTwit Cross-Site Scripting (1.7.0) CVE-2021-24582 CWE-79 CWE-79 High WordPress Plugin ThinkTwit Security Bypass (1.5.1) CWE-264 CWE-264 High WordPress Plugin Thinkun Remind 'dirPath' Parameter Information Disclosure (1.1.3) CWE-22 CWE-22 High WordPress Plugin ThirstyAffiliates Affiliate Link Manager Cross-Site Scripting (3.9.2) CVE-2021-24127 CWE-79 CWE-79 High WordPress Plugin ThreeWP Email Reflector 'Subject' Field Cross-Site Scripting (1.15) CVE-2012-2572 CWE-79 CWE-79 High WordPress Plugin Thrive Apprentice Security Bypass (2.3.9.3) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Architect Security Bypass (2.6.7.3) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Clever Widgets Security Bypass (1.56) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Comments Security Bypass (1.4.15.2) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Dashboard Security Bypass (2.3.9.2) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Headline Optimizer Security Bypass (1.3.7.2) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Leads Security Bypass (2.3.9.3) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Optimize Security Bypass (1.4.13.2) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Ovation Security Bypass (2.4.4) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Quiz Builder Security Bypass (2.3.9.3) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Themes Builder Security Bypass (2.2.3) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thrive Ultimatum Security Bypass (2.3.9.3) CVE-2021-24219 CWE-264 CWE-264 High WordPress Plugin Thumbnail carousel slider Arbitrary File Upload (1.0) CWE-434 CWE-434 High WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.4.9.9) CVE-2022-4549 CWE-352 CWE-352 High WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.5.1.0) CVE-2023-23726 CWE-352 CWE-352 High WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Scripting (3.4.8.2) CVE-2021-24797 CWE-79 CWE-79 High WordPress Plugin Tickera-WordPress Event Ticketing Security Bypass (3.4.9.1) CWE-862 CWE-862 High WordPress Plugin Tickera-WordPress Event Ticketing Unspecified Vulnerability (3.4.6.7) High WordPress Plugin Ticket Manager Cross-Site Scripting (1) CWE-79 CWE-79 High WordPress Plugin Ticketrilla:Client PHP Object Injection (1.0.1) CWE-915 CWE-915 High WordPress Plugin Tidio Gallery Multiple Vulnerabilities (1.1) CVE-2016-1000153 CWE-79 CWE-434 CWE-79 CWE-434 High WordPress Plugin Tidio Live Chat Cross-Site Request Forgery (4.1.0) CWE-352 CWE-352 High WordPress Plugin Tierra's Billboard Manager SQL Injection (1.14) CWE-89 CWE-89 High WordPress Plugin Tigris for Salesforce PHP Object Injection (1.1.3) CWE-915 CWE-915 High WordPress Plugin Timber Cross-Site Scripting (1.2.2) CWE-79 CWE-79 High WordPress Plugin Timed Content Cross-Site Scripting (2.72) CVE-2023-0067 CWE-79 CWE-79 High WordPress Plugin Timed Popup Cross-Site Request Forgery (1.3) CVE-2014-9525 CWE-352 CWE-352 High WordPress Plugin Timeline Calendar SQL Injection (1.2) CVE-2021-24553 CWE-89 CWE-89 High WordPress Plugin Timeline Event History PHP Object Injection (3.1) CVE-2024-5726 CWE-915 CWE-915 High WordPress Plugin Timesheet by BestWebSoft Cross-Site Scripting (0.1.4) CVE-2017-2171 CWE-79 CWE-79 High WordPress Plugin Time Sheets Cross-Site Scripting (1.4.2) CWE-79 CWE-79 High WordPress Plugin Time Sheets Multiple Cross-Site Scripting Vulnerabilities (1.5.1) CWE-79 CWE-79 High WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Request Forgery (2.4.1) CVE-2021-24583 CVE-2021-24584 CWE-352 CWE-352 High WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Scripting (2.3.18) CVE-2021-24724 CWE-79 CWE-79 High WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19) CVE-2021-24585 CWE-200 CWE-200 High WordPress Plugin Timetable and Event Schedule by MotoPress Unspecified Vulnerability (2.4.3) High WordPress Plugin TinyMCE Advanced Cross-Site Request Forgery (4.1) CWE-352 CWE-352 High WordPress Plugin TinyMCE Color Picker Multiple Vulnerabilities (1.1) CVE-2014-3844 CVE-2014-3845 CWE-264 CWE-352 CWE-264 CWE-352 High WordPress Plugin TinyMCE Custom Styles Cross-Site Scripting (1.1.2) CVE-2023-23995 CWE-79 CWE-79 High 1...269270271272...303 270 / 303
