Exploit Intelligence Platform

Updated 3h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

339,501 CVEs tracked 53,335 with exploits 4,748 exploited in wild 1,551 CISA KEV 3,948 Nuclei templates 49,234 vendors 42,835 researchers

42,628 results Clear all

CVE-2014-4570 EPSS 0.00

VideoWhisper Video Presentation <3.31 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to c_login.php or (2) room parameter to index.php in vp/.

CWE-79 Jul 02, 2014

CVE-2014-4568 EPSS 0.00

Video Posts Webcam Recorder <1.55.4 - XSS

Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.

CWE-79 Jul 02, 2014

CVE-2014-4566 EPSS 0.00

WordPress verweise-wordpress-twitter <1.0.2 - XSS

Cross-site scripting (XSS) vulnerability in res/fake_twitter/frame.php in the "verwei.se - WordPress - Twitter" (verweise-wordpress-twitter) plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter.

CWE-79 Jul 02, 2014

CVE-2014-4560 EPSS 0.00

WordPress ToolPage <1.6.1 - XSS

Cross-site scripting (XSS) vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the t parameter.

CWE-79 Jul 02, 2014

CVE-2014-4557 EPSS 0.00

Swipe Checkout <3.1.0 - XSS

Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop) plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.

CWE-79 Jul 02, 2014

CVE-2014-4552 EPSS 0.00

Spotlight <4.7 - XSS

Cross-site scripting (XSS) vulnerability in library/includes/payment/paypalexpress/DoDirectPayment.php in the Spotlight (spotlightyour) plugin 4.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the paymentType parameter.

CWE-79 Jul 02, 2014

CVE-2014-4551 EPSS 0.00

WordPress Social Connect <1.0.4 - XSS

Cross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter.

CWE-79 Jul 02, 2014

CVE-2014-4547 EPSS 0.00

Rezgo Online Booking <1.8.2 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter.

CWE-79 Jul 02, 2014

CVE-2014-4543 EPSS 0.00

Pay Per Media Player <1.24 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fcolor, (2) links, (3) stitle, (4) height, (5) width, (6) host, (7) bcolor, (8) msg, (9) id, or (10) size parameter.

CWE-79 Jul 02, 2014

CVE-2014-4542 EPSS 0.00

Ooorl plugin for WordPress - XSS

Cross-site scripting (XSS) vulnerability in redirect.php in the Ooorl plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.

CWE-79 Jul 02, 2014

CVE-2014-4541 EPSS 0.00

OMFG Mobile Pro <1.1.26 - XSS

Cross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in the OMFG Mobile Pro plugin 1.1.26 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter.

CWE-79 Jul 02, 2014

CVE-2014-4540 EPSS 0.00

Oleggo LiveStream <0.2.6 - XSS

Cross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CWE-79 Jul 02, 2014

CVE-2014-4537 EPSS 0.00

Keyword Strategy Internal Links <2.0 - XSS

Cross-site scripting (XSS) vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) sort, (2) search, or (3) dir parameter.

CWE-79 Jul 02, 2014

CVE-2014-4532 EPSS 0.00

WordPress GarageSale <1.2.3 - XSS

Cross-site scripting (XSS) vulnerability in templates/printAdminUsersList_Footer.tpl.php in the GarageSale plugin before 1.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CWE-79 Jul 02, 2014

CVE-2014-4531 EPSS 0.00

WordPress Game tabs plugin <0.4.0 - XSS

Cross-site scripting (XSS) vulnerability in main_page.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter.

CWE-79 Jul 02, 2014

CVE-2014-4529 EPSS 0.00

Flash Photo Gallery <0.7 - XSS

Cross-site scripting (XSS) vulnerability in fpg_preview.php in the Flash Photo Gallery plugin 0.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the path parameter.

CWE-79 Jul 02, 2014

CVE-2014-4527 EPSS 0.00

EnvialoSimple: Email Marketing and Newsletters - WordPress <1.98 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin before 1.98 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) FormID or (2) AdministratorID parameter.

CWE-79 Jul 02, 2014

CVE-2014-4526 EPSS 0.00

WordPress efence <1.3.2 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) zoneid, (3) pubKey, or (4) privKey parameter.

CWE-79 Jul 02, 2014

CVE-2014-4524 EPSS 0.00

WP Easy Post Types <1.4.4 - XSS

Cross-site scripting (XSS) vulnerability in classes/custom-image/media.php in the WP Easy Post Types plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ref parameter.

CWE-79 Jul 02, 2014

CVE-2014-4522 EPSS 0.00

WordPress Edition plugin <1.0-beta10 - XSS

Cross-site scripting (XSS) vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

CWE-79 Jul 02, 2014