Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The WP-SOS-Donate Donation Sidebar Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.9.2 d…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.1.1 due to i…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The CoSign Single Signon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.3.1 due to insu…Check if you run itEPSS 0.25%Dec 5, 2025
- Medium6.4The Sermon Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 2.30.0.Check if you run itEPSS 0.22%Dec 5, 2025
- Medium5.4The PDF Catalog for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pdfcatalog' AJAX action in all versions up to, and including…Check if you run itEPSS 0.17%Dec 5, 2025
- High7.1Monkeytype is a minimalistic and customizable typing test.Open the advisoryDec 4, 2025
- Medium5.4SysReptor is a fully customizable pentest reporting platform.Open the advisoryDec 4, 2025
- Medium5.3TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the endpoint, allowing attackers to steal session cookies and potentially escalate…Open the advisoryDec 4, 2025
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Open the advisoryDec 4, 2025
- Medium5.4Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13…Open the advisoryDec 4, 2025
- Low1.9A vulnerability was identified in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.28%Dec 4, 2025
- Medium5.1Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories.Check if you run itEPSS 0.33%Dec 4, 2025
- Medium5.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.Open the advisoryDec 4, 2025
- Medium5.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.Open the advisoryDec 4, 2025
- Medium6.1The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.8 due to insufficient inp…Check if you run itEPSS 0.25%Dec 4, 2025
- High7.2The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…Check if you run itEPSS 0.29%Dec 4, 2025
- Critical9.6DeepChat is a smart assistant uses artificial intelligence.Open the advisoryDec 3, 2025
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LCP Image to preload metabox in all versions up to, and including, 3.1.13 due…Check if you run itEPSS 0.29%Dec 3, 2025
- Medium6.4The CSSIgniter Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element' shortcode attribute in all versions up to, and including,…Check if you run itEPSS 0.23%Dec 3, 2025
- Medium6.1The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components.Open the advisoryDec 2, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic X…Check if you run itEPSS 0.20%Dec 2, 2025
- Medium6.4The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nxt-year' shortcode in all version…Check if you run itEPSS 0.23%Dec 2, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) in IDI Eikon's Governalia.Open the advisoryDec 2, 2025
- Medium6.1The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and i…Check if you run itEPSS 0.26%Dec 2, 2025