Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Sensitive Information Disclosure Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WordPress Plugin Export any WordPress data to XML/CSV Cross-Site Scripting (1.3.5) CWE-79 CWE-79 High WordPress Plugin Export any WordPress data to XML/CSV SQL Injection (1.3.4) CVE-2022-1800 CWE-89 CWE-89 High WordPress Plugin Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list CSV Injection (2.0.68) CVE-2022-3603 CWE-1236 CWE-1236 High WordPress Plugin Export Post Info Cross-Site Scripting (1.1.0) CVE-2022-38068 CWE-79 CWE-79 High WordPress Plugin Export Post Info CSV Injection (1.2.0) CVE-2022-38061 CWE-1236 CWE-1236 High WordPress Plugin Export User Data Cross-Site Scripting (1.3.1) CWE-79 CWE-79 High WordPress Plugin Export Users to CSV CSV Injection (1.1.1) CVE-2018-15571 CWE-20 CWE-20 High WordPress Plugin Export Users to CSV CSV Injection (1.4.2) CVE-2020-9466 CWE-20 CWE-20 High WordPress Plugin Export Users to CSV Unspecified Vulnerability (1.3) High WordPress Plugin Export Users With Meta SQL Injection (0.6.4) CVE-2021-24451 CWE-89 CWE-89 High WordPress Plugin Exquisite PayPal Donation Cross-Site Scripting (2.0.0) CVE-2023-23785 CWE-79 CWE-79 High WordPress Plugin ExS Widgets Local File Inclusion (0.3.1) CVE-2024-38715 CWE-22 CWE-22 High WordPress Plugin Extend WordPress-Various Shortcodes & Widgets TimThumb Arbitrary File Upload (2.1.01) CVE-2011-4106 CWE-20 CWE-20 High WordPress Plugin Extensive VC Addons for WPBakery page builder Local File Inclusion (1.9) CVE-2023-0159 CWE-22 CWE-22 High WordPress Plugin External 'Video for Everybody' Cross-Site Scripting (2.0) CWE-79 CWE-79 High WordPress Plugin External Links-nofollow, noopener & new window Cross-Site Request Forgery (2.57) CWE-352 CWE-352 High WordPress Plugin External Links-nofollow, noopener & new window Cross-Site Scripting (2.55) CWE-79 CWE-79 High WordPress Plugin External Links-nofollow, noopener & new window Multiple Cross-Site Scripting Vulnerabilities (1.80) CWE-79 CWE-79 High WordPress Plugin External Media Arbitrary File Upload (1.0.33) CVE-2021-24311 CWE-434 CWE-434 High WordPress Plugin External Media without Import Cross-Site Scripting (1.0.1) CWE-79 CWE-79 High WordPress Plugin Extra User Details Privilege Escalation (0.4.2) CWE-264 CWE-264 High WordPress Plugin Exxp Cross-Site Scripting (2.6.8) CVE-2022-45812 CWE-79 CWE-79 High WordPress Plugin Eyes Only:User Access Shortcode Cross-Site Scripting (1.8.2) CVE-2023-25786 CWE-79 CWE-79 High WordPress Plugin EZ Google Analytics Cross-Site Scripting (4.1.06) CWE-79 CWE-79 High WordPress Plugin EZP Coming Soon Page Cross-Site Scripting (1.0.0) CWE-79 CWE-79 High WordPress Plugin EZ Portfolio Multiple Cross-Site Scripting Vulnerabilities (1.0.1) CWE-79 CWE-79 High WordPress Plugin EZPZ One Click Backup 'mail' Parameter Cross-Site Scripting (12.03.10) CWE-79 CWE-79 High WordPress Plugin EZPZ One Click Backup Remote Code Execution (12.03.10) CVE-2014-3114 CWE-78 CWE-78 High WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup Arbitrary SQL Query Execution Vulnerability (4.16.38) CWE-89 CWE-89 High WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup Multiple Vulnerabilities (4.11.33) CWE-22 CWE-94 CWE-22 CWE-94 High WordPress Plugin Facebook, Twitter & Google+ Social Widgets Multiple Vulnerabilities (1.3.7) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin Facebook-this Spam Links Injection (2.5) CWE-610 CWE-610 High WordPress Plugin Facebook Button by BestWebSoft Cross-Site Request Forgery (2.13) CWE-352 CWE-352 High WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.33) CWE-79 CWE-79 High WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.53) CVE-2017-2171 CWE-79 CWE-79 High WordPress Plugin Facebook for WooCommerce Cross-Site Request Forgery (1.9.14) CVE-2019-15841 CWE-352 CWE-352 High WordPress Plugin Facebook for WordPress Cross-Site Request Forgery (3.0.3) CVE-2021-24218 CWE-352 CWE-352 High WordPress Plugin Facebook for WordPress PHP Object Injection (2.2.2) CVE-2021-24217 CWE-915 CWE-915 High WordPress Plugin Facebook Like Box Cross-Site Request Forgery (2.8.2) CVE-2014-9524 CWE-352 CWE-352 High WordPress Plugin Facebook Like Box Multiple Vulnerabilities (2.9.1) CWE-352 CWE-434 CWE-352 CWE-434 High WordPress Plugin Facebook Like Box Unspecified Vulnerability (1.0.17) High WordPress Plugin Facebook Members Cross-Site Request Forgery (5.0.4) CVE-2013-2703 CWE-352 CWE-352 High WordPress Plugin Facebook Members Cross-Site Scripting (7.0) CWE-79 CWE-79 High WordPress Plugin Facebook Opengraph Meta 'all_meta.php' SQL Injection (1.0) CWE-89 CWE-89 High WordPress Plugin Facebook Page Feed Timeline Cross-Site Scripting (1.0) CVE-2021-24435 CWE-79 CWE-79 High WordPress Plugin Facebook Page Photo Gallery Cross-Site Scripting (2.0.9) CWE-79 CWE-79 High WordPress Plugin Facebook Photo Fetcher Unspecified Vulnerability (2.1.17) High WordPress Plugin Facebook Promotion Generator for WordPress 'fbActivate.php' SQL Injection (1.3.3) CWE-89 CWE-89 High WordPress Plugin Facebook Promotion Generator for WordPress Multiple Cross-Site Scripting Vulnerabilities (1.3.4) CVE-2014-4528 CWE-79 CWE-79 High WordPress Plugin Facebook With Login Multiple Vulnerabilities (1.0) CWE-79 CWE-89 CWE-79 CWE-89 High WordPress Plugin Falang multilanguage for WordPress Cross-Site Scripting (1.3.17) CWE-79 CWE-79 High WordPress Plugin FancyBox for WordPress Cross-Site Scripting (3.0.2) CWE-79 CWE-79 High WordPress Plugin FancyBox for WordPress Security Bypass (3.0.2) CVE-2015-1494 CWE-264 CWE-264 High WordPress Plugin Fancy Cats Multiple Cross-Site Scripting Vulnerabilities (1.1) CWE-79 CWE-79 High WordPress Plugin Fancy Comments WordPress Cross-Site Scripting (1.2.10) CVE-2023-23670 CWE-79 CWE-79 High WordPress Plugin FancyFlickr Cross-Site Scripting (1.0) CWE-79 CWE-79 High WordPress Plugin Fancy Gallery 'image-upload.php' Arbitrary File Upload (1.2.4) CWE-434 CWE-434 High WordPress Plugin Fancy Gallery Cross-Site Scripting (1.5.12) CWE-79 CWE-79 High WordPress Plugin Fancy Product Designer-WooCommerce Arbitrary File Upload (4.5.1) CWE-434 CWE-434 High WordPress Plugin Fancy Product Designer-WooCommerce Arbitrary File Upload (4.6.8) CVE-2021-24370 CWE-434 CWE-434 High WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Request Forgery (4.7.5) CVE-2021-4096 CWE-352 CWE-352 High WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Scripting (3.4.1) CWE-79 CWE-79 High WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Scripting (4.5.0) CWE-79 CWE-79 High WordPress Plugin Fancy Product Designer-WooCommerce SQL Injection (4.7.4) CVE-2021-4134 CWE-89 CWE-89 High WordPress Plugin Fancy Slideshows Security Bypass (2.4) CWE-264 CWE-264 High WordPress Plugin FAQ Multiple Cross-Site Scripting Vulnerabilities (1.0.14) CWE-79 CWE-79 High WordPress Plugin FAQs Manager Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.0) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin FAQs Manager SQL Injection (1.0) CWE-89 CWE-89 High WordPress Plugin Far Future Expiry Header Cross-Site Request Forgery (1.4) CVE-2021-24799 CWE-352 CWE-352 High WordPress Plugin Faster and Easier scroll to Top for WordPress-Smart Scroll to Top Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.3) CVE-2021-24867 CWE-912 CWE-912 High WordPress Plugin Fast Image Adder Arbitrary File Upload (1.1) CVE-2015-1000001 CWE-434 CWE-434 High WordPress Plugin Fast Secure Contact Form 'index.php' Cross-Site Scripting (3.0.3.1) CWE-79 CWE-79 High WordPress Plugin Fast Secure Contact Form-Clockwork SMS Cross-Site Scripting (2.1.2) CVE-2017-17780 CWE-79 CWE-79 High WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.35) CWE-79 CWE-79 High WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.37) CWE-79 CWE-79 High 1...92939495...169 93 / 169
