Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jezza101 bbpress Simple Advert Units bbpress-simple-advert-units…Check if you run itEPSS 0.28%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in desertthemes NewsMash newsmash allows Stored XSS.This issue affec…Check if you run itEPSS 0.26%Feb 20, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Sto…Check if you run itEPSS 0.26%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Sto…Check if you run itEPSS 0.25%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.T…Check if you run itEPSS 0.24%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows St…Check if you run itEPSS 0.26%Feb 20, 2026
- Medium6.4The Master Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ma_el_bh_table_btn_text' parameter in versions up to, and in…Check if you run itEPSS 0.16%Feb 20, 2026
- Medium5.1WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability.Check if you run itEPSS 0.28%Feb 20, 2026
- Low2.0A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8.Check if you run itEPSS 0.35%Feb 20, 2026
- Medium6.4The Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 6.7.1.7 due to insuff…Check if you run itEPSS 0.24%Feb 20, 2026
- Medium5.4Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.38%Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.4LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.32%Feb 20, 2026
- Medium4.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.35%Feb 20, 2026
- Medium5.3LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.37%Feb 20, 2026
- Medium5.8OpenClaw is a personal AI assistant.Check if you run itEPSS 0.26%Feb 20, 2026
- Critical9.9Hackage package and doc upload stored XSS vulnerabilityCheck if you run itEPSS 0.43%Jan 16, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pinpoll Pinpoll pinpoll allows Reflected XSS.This issue affects P…Check if you run itEPSS 0.22%Jan 8, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliat…Check if you run itEPSS 0.18%Jan 6, 2026
- Medium6.1vega-functions provides function implementations for the Vega expression language.Check if you run itEPSS 0.23%Jan 5, 2026
- Critical9.3Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.Check if you run itEPSS 0.50%Jan 5, 2026
- Medium4.8Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from user input.Check if you run itEPSS 0.33%Jan 5, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
- Low2.2A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.22%Jan 2, 2026