VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306217 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-58816 | redhat_vex | WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability | known not affected: 1 | 2026-04-29T01:44:23+00:00 | Vulnerability · Source |
| CVE-2025-58012 | redhat_vex | WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T01:44:22+00:00 | Vulnerability · Source |
| CVE-2025-58827 | redhat_vex | WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability | known not affected: 1 | 2026-04-29T01:44:22+00:00 | Vulnerability · Source |
| CVE-2025-31003 | redhat_vex | WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability | known not affected: 1 | 2026-04-29T01:44:21+00:00 | Vulnerability · Source |
| CVE-2025-58009 | redhat_vex | WordPress CP Multi View Event Calendar plugin <= 1.4.35 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:44:21+00:00 | Vulnerability · Source |
| CVE-2025-49300 | redhat_vex | WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-04-29T01:44:20+00:00 | Vulnerability · Source |
| CVE-2025-47646 | redhat_vex | WordPress PSW Front-end Login & Registration plugin <= 1.13 - Broken Authentication Vulnerability | known not affected: 1 | 2026-04-29T01:44:20+00:00 | Vulnerability · Source |
| CVE-2025-26977 | redhat_vex | WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T01:44:18+00:00 | Vulnerability · Source |
| CVE-2025-30877 | redhat_vex | WordPress Quiz Cat plugin <= 3.0.8 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:44:18+00:00 | Vulnerability · Source |
| CVE-2024-51671 | redhat_vex | WordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:44:17+00:00 | Vulnerability · Source |
| CVE-2024-45453 | redhat_vex | WordPress Maintenance Redirect plugin <= 2.0.1 - IP Bypass vulnerability | known not affected: 1 | 2026-04-29T01:44:16+00:00 | Vulnerability · Source |
| CVE-2024-43944 | redhat_vex | WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability | known not affected: 1 | 2026-04-29T01:44:16+00:00 | Vulnerability · Source |
| CVE-2024-31265 | redhat_vex | WordPress Sumo plugin <= 1.34 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:44:15+00:00 | Vulnerability · Source |
| CVE-2024-30507 | redhat_vex | WordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T01:44:14+00:00 | Vulnerability · Source |
| CVE-2024-31254 | redhat_vex | WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability | known not affected: 1 | 2026-04-29T01:44:14+00:00 | Vulnerability · Source |
| CVE-2024-22308 | redhat_vex | WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection | known not affected: 1 | 2026-04-29T01:44:13+00:00 | Vulnerability · Source |
| CVE-2023-46311 | redhat_vex | WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) | known not affected: 1 | 2026-04-29T01:44:13+00:00 | Vulnerability · Source |
| CVE-2023-45074 | redhat_vex | WordPress Advanced Page Visit Counter Plugin <= 7.1.1 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:12+00:00 | Vulnerability · Source |
| CVE-2023-46084 | redhat_vex | WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:12+00:00 | Vulnerability · Source |
| CVE-2023-45069 | redhat_vex | WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:11+00:00 | Vulnerability · Source |
| CVE-2023-45055 | redhat_vex | WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:10+00:00 | Vulnerability · Source |
| CVE-2023-41652 | redhat_vex | WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:10+00:00 | Vulnerability · Source |
| CVE-2023-40600 | redhat_vex | WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure | known not affected: 1 | 2026-04-29T01:44:09+00:00 | Vulnerability · Source |
| CVE-2023-40215 | redhat_vex | WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:08+00:00 | Vulnerability · Source |
| CVE-2023-40207 | redhat_vex | WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:07+00:00 | Vulnerability · Source |
| CVE-2023-38391 | redhat_vex | WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:06+00:00 | Vulnerability · Source |
| CVE-2023-38382 | redhat_vex | WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:06+00:00 | Vulnerability · Source |
| CVE-2023-37966 | redhat_vex | WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:05+00:00 | Vulnerability · Source |
| CVE-2023-35911 | redhat_vex | WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:04+00:00 | Vulnerability · Source |
| CVE-2023-37867 | redhat_vex | WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition | known not affected: 1 | 2026-04-29T01:44:04+00:00 | Vulnerability · Source |
| CVE-2023-28786 | redhat_vex | WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection | known not affected: 1 | 2026-04-29T01:44:03+00:00 | Vulnerability · Source |
| CVE-2023-28748 | redhat_vex | WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:02+00:00 | Vulnerability · Source |
| CVE-2023-28168 | redhat_vex | WordPress WordPress Console plugin <= 0.3.9 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:44:02+00:00 | Vulnerability · Source |
| CVE-2023-25983 | redhat_vex | WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection | known not affected: 1 | 2026-04-29T01:44:01+00:00 | Vulnerability · Source |
| CVE-2023-23985 | redhat_vex | WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing | known not affected: 1 | 2026-04-29T01:44:00+00:00 | Vulnerability · Source |
| CVE-2023-24375 | redhat_vex | WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:44:00+00:00 | Vulnerability · Source |
| CVE-2023-24410 | redhat_vex | WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:44:00+00:00 | Vulnerability · Source |
| CVE-2023-23825 | redhat_vex | WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability | known not affected: 1 | 2026-04-29T01:44:00+00:00 | Vulnerability · Source |
| CVE-2023-23814 | redhat_vex | WordPress Calendar Event Multi View plugin <= 1.4.13 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:59+00:00 | Vulnerability · Source |
| CVE-2023-22676 | redhat_vex | WordPress Advanced Custom Fields: Image Crop Add-on Plugin <= 1.4.12 is vulnerable to Broken Access Control | known not affected: 1 | 2026-04-29T01:43:58+00:00 | Vulnerability · Source |
| CVE-2022-46849 | redhat_vex | WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection | known not affected: 1 | 2026-04-29T01:43:58+00:00 | Vulnerability · Source |
| CVE-2026-28078 | redhat_vex | WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability | known not affected: 1 | 2026-04-29T01:43:58+00:00 | Vulnerability · Source |
| CVE-2022-45819 | redhat_vex | WordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:56+00:00 | Vulnerability · Source |
| CVE-2022-40696 | redhat_vex | WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure | known not affected: 1 | 2026-04-29T01:43:55+00:00 | Vulnerability · Source |
| CVE-2026-28036 | redhat_vex | WordPress Ratatouille theme <= 1.2.6 - Server Side Request Forgery (SSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:55+00:00 | Vulnerability · Source |
| CVE-2026-5039 | redhat_vex | Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N | known not affected: 1 | 2026-04-29T01:43:54+00:00 | Vulnerability · Source |
| CVE-2026-28080 | redhat_vex | WordPress Rank Math SEO PRO plugin <= 3.0.95 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:54+00:00 | Vulnerability · Source |
| CVE-2026-28070 | redhat_vex | WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:53+00:00 | Vulnerability · Source |
| CVE-2026-28044 | redhat_vex | WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:53+00:00 | Vulnerability · Source |
| CVE-2026-28071 | redhat_vex | WordPress pixfort Core plugin <= 3.2.22 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:53+00:00 | Vulnerability · Source |