Skip to content
Noroxi

fullworksplugins records

17 published records for vendor fullworksplugins.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
64.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 22
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2023-25714
    30Monitor

    WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    fullworks · quick paypal paymentsDec 9, 2024

  • CVE-2023-25035
    26Monitor

    WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    fullworks · quick contact formDec 9, 2024

  • CVE-2017-18536
    25Monitor

    The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    fullworksplugins · stop user enumerationAug 21, 2019

  • CVE-2023-23491
    24Monitor

    The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' p

    MediumCVSS 6.1Proof of conceptEPSS 1%

    fullworksplugins · quick event managerJan 20, 2023

  • CVE-2023-23979
    24Monitor

    WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    fullworksplugins · quick event managerApr 6, 2023

  • CVE-2023-25713
    24Monitor

    WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    fullworksplugins · quick paypal paymentsApr 7, 2023

  • CVE-2017-1000226
    21Monitor

    Stop User Enumeration 1.3.8 allows user enumeration via the REST API

    MediumCVSS 5.3No exploitEPSS 1%

    fullworksplugins · stop user enumerationNov 17, 2017

  • CVE-2025-4302
    21Monitor

    Stop User Enumeration < 1.7.3 - Protection Bypass

    MediumCVSS 5.3Proof of conceptEPSS 1%

    fullworksplugins · stop user enumerationJul 17, 2025

  • CVE-2023-23975
    21Monitor

    WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    fullworks · quick event managerDec 9, 2024

  • CVE-2022-37339
    21Monitor

    WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 1%

    fullworksplugins · meet my teamSep 23, 2022

  • CVE-2023-23885
    21Monitor

    WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    fullworksplugins · quick contact formApr 7, 2023

  • CVE-2023-23889
    21Monitor

    WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    fullworksplugins · quick paypal paymentsApr 25, 2023

  • CVE-2023-23974
    21Monitor

    WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

    MediumCVSS 5.4No exploitEPSS 0%

    fullworksplugins · quick event managerMar 1, 2023

  • CVE-2023-1554
    19Monitor

    Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    fullworksplugins · quick paypal paymentsMay 2, 2023

  • CVE-2023-25702
    19Monitor

    WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    fullworksplugins · quick paypal paymentsApr 7, 2023

  • CVE-2022-47608
    19Monitor

    WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    fullworksplugins · quick contact formApr 25, 2023

  • CVE-2022-46863
    19Monitor

    WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    fullworksplugins · quick event managerMar 28, 2023