CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2022-47608 | 中危4.8 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions. | 25/04/2023 |
| CVE-2023-25713 | 中危6.1 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. | 07/04/2023 |
| CVE-2023-25702 | 中危4.8 | Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. | 07/04/2023 |
| CVE-2023-23885 | 中危5.4 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions. | 07/04/2023 |
| CVE-2023-23979 | 中危6.1 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions. | 06/04/2023 |
| CVE-2022-46863 | 中危4.8 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions. | 28/03/2023 |
| CVE-2023-23974 | 中危5.4 | Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update). | 01/03/2023 |
| CVE-2023-23491 | 中危6.1 | The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qem_ajax_calendar' action. | 20/01/2023 |
| CVE-2022-37339 | 中危5.4 | Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Meet My Team plugin <= 2.0.5 at WordPress. | 23/09/2022 |
| CVE-2017-18536 | 中危6.1 | The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS. | 21/08/2019 |
| CVE-2017-1000226 | 中危5.3 | Stop User Enumeration 1.3.8 allows user enumeration via the REST API | 17/11/2017 |