CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 18 Last 7 days 2,786 Total CVEs 401,148 CISA KEV 1,731 Critical 42,394 All stats

Page 1

CVE-2013-0237 MEDIUM

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote…

CVSS 4.3 EPSS 3.14% Jul 8, 2013

CVE-2012-2401 MEDIUM

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which…

CVSS 5.0 EPSS 3.38% Apr 21, 2012

CVE-2005-4600 MEDIUM

Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a t…

CVSS 6.4 EPSS 6.01% Jan 1, 2006

CVE-2005-4599 MEDIUM

Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or H…

CVSS 4.3 EPSS 1.71% Jan 1, 2006

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2013-0237	Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote…	MEDIUM	4.3	3.14%	Jul 8, 2013
CVE-2012-2401	Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which…	MEDIUM	5.0	3.38%	Apr 21, 2012
CVE-2005-4600	Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a t…	MEDIUM	6.4	6.01%	Jan 1, 2006
CVE-2005-4599	Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or H…	MEDIUM	4.3	1.71%	Jan 1, 2006

Rows per page

Showing 1 to 4 CVEs · page 1