Vulnerability & Exploit Database

Try Surface Command Get a continuous 360° view of your attack surface

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. The exploits are all included in the Metasploit framework. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 9,741 - 9,760 of 257,730 in total
WordPress Plugin: zigaform-form-builder-lite: CVE-2024-13573: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: zigaform-calculator-cost-estimation-form-builder-lite: CVE-2024-13587: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: web-stories-enhancer: CVE-2024-13575: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: k-elements: CVE-2024-56000: Incorrect Privilege Assignment
Published: February 17, 2025 | Severity: 10
vulnerability
Explore
WordPress Plugin: memorialday: CVE-2024-13523: Cross-Site Request Forgery (CSRF)
Published: February 17, 2025 | Severity: 6
vulnerability
Explore
WordPress Plugin: s2member: CVE-2024-11376: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 6
vulnerability
Explore
WordPress Plugin: speedsize-ai-image-optimizer: CVE-2024-13438: Cross-Site Request Forgery (CSRF)
Published: February 17, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: tourmaster: CVE-2024-13369: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: February 17, 2025 | Severity: 7
vulnerability
Explore
WordPress Plugin: threepress: CVE-2024-13395: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: post-smtp: CVE-2025-0521: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 6
vulnerability
Explore
Ubuntu: USN-7369-1 (CVE-2025-1365): elfutils vulnerabilities
Published: February 17, 2025 | Severity: 4
vulnerability
Explore
WordPress Plugin: ecwid-shopping-cart: CVE-2024-13795: Cross-Site Request Forgery (CSRF)
Published: February 17, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: gtbabel: CVE-2024-11638: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published: February 17, 2025 | Severity: 10
vulnerability
Explore
Huawei EulerOS: CVE-2025-1377: elfutils security update
Published: February 17, 2025 | Severity: 2
vulnerability
Explore
WordPress Plugin: bigbuy-wc-dropshipping-connector: CVE-2024-13538: Generation of Error Message Containing Sensitive Information
Published: February 17, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: profit-products-tables-for-woocommerce: CVE-2025-0864: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 6
vulnerability
Explore
Huawei EulerOS: CVE-2025-1376: elfutils security update
Published: February 17, 2025 | Severity: 2
vulnerability
Explore
WordPress Plugin: woo-addon-uploads: CVE-2024-13622: Exposure of Sensitive Information to an Unauthorized Actor
Published: February 17, 2025 | Severity: 8
vulnerability
Explore
WordPress Plugin: everest-forms: CVE-2025-1128: Unrestricted Upload of File with Dangerous Type
Published: February 17, 2025 | Severity: 10
vulnerability
Explore
WordPress Plugin: simplebooklet: CVE-2024-13588: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 17, 2025 | Severity: 5
vulnerability
Explore