CoreCVE

CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 12Last 7 days 2,642Total CVEs 401,252CISA KEV 1,733Critical 42,400 All stats
Clear
More filters (active)
Filters: Vendor: Rustaurius Remove filter Clear all

Page 1 (more results available)

CVE-2026-94391 MEDIUM

WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability

CVSS 6.5 EPSS 0.17% Sep 23, 2026
CVE-2026-27436 CRITICAL

WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

CVSS 9.1 EPSS 0.66% Jul 2, 2026
CVE-2026-54835 HIGH

WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability

CVSS 7.5 EPSS 0.35% Jun 26, 2026
CVE-2026-6498 MEDIUM

Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter

CVSS 5.3 EPSS 0.24% Apr 30, 2026
CVE-2026-4336 MEDIUM

Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content

CVSS 6.4 EPSS 0.38% Apr 9, 2026
CVE-2026-39602 MEDIUM

WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability

CVSS 5.3 EPSS 0.29% Apr 8, 2026
CVE-2026-25327 MEDIUM

WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability

CVSS 6.5 EPSS 0.21% Mar 25, 2026
CVE-2026-24634 MEDIUM

WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability

CVSS 5.3 EPSS 0.24% Jan 23, 2026
CVE-2025-68044 HIGH

WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability

CVSS 8.6 EPSS 0.27% Jan 5, 2026
CVE-2025-68601 MEDIUM

WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

CVSS 5.4 EPSS 0.12% Dec 24, 2025
CVE-2025-11496 MEDIUM

Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting

CVSS 6.1 EPSS 0.21% Dec 21, 2025
CVE-2025-67590 MEDIUM

WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

CVSS 4.3 EPSS 0.12% Dec 9, 2025
CVE-2025-11799 MEDIUM

Affiliate AI Lite <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVSS 6.4 EPSS 0.22% Nov 21, 2025
CVE-2025-62072 MEDIUM

WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

CVSS 4.3 EPSS 0.20% Oct 22, 2025
CVE-2025-53454 MEDIUM

WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability

CVSS 6.5 EPSS 0.28% Sep 22, 2025
CVE-2025-58235 MEDIUM

WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

CVSS 6.5 EPSS 0.20% Sep 22, 2025
CVE-2025-6993 HIGH

Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function

CVSS 8.8 EPSS 0.47% Jul 16, 2025
CVE-2025-49266 HIGH

WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability

CVSS 7.1 EPSS 0.34% Jun 17, 2025
CVE-2025-49288 HIGH

WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability

CVSS 8.8 EPSS 0.53% Jun 6, 2025
CVE-2025-47580 CRITICAL

WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

CVSS 9.8 EPSS 0.29% May 15, 2025
CVE-2025-47490 HIGH

WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability

CVSS 8.5 EPSS 0.32% May 7, 2025
CVE-2025-47466 MEDIUM

WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

CVSS 5.4 EPSS 0.15% May 7, 2025
CVE-2025-32694 MEDIUM

WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability

CVSS 4.7 EPSS 0.35% Apr 9, 2025
CVE-2024-12410 MEDIUM

Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection

CVSS 4.9 EPSS 0.44% Apr 2, 2025
CVE-2025-2005 CRITICAL

Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload

CVSS 9.8 EPSS 21.98% Apr 2, 2025

Showing 1 to 25 CVEs · page 1 (more available)