Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, 1.…Check if you run itEPSS 0.30%Dec 2, 2025
- Medium6.4The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Sit…Check if you run itEPSS 0.18%Dec 2, 2025
- High8.5Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Open the advisoryDec 1, 2025
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Open the advisoryDec 1, 2025
- Low2.1A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654.Check if you run itEPSS 0.32%Dec 1, 2025
- Low1.9A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01.Check if you run itEPSS 0.25%Nov 30, 2025
- Low2.1A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e.Check if you run itEPSS 0.32%Nov 30, 2025
- Low1.9A weakness has been identified in yungifez Skuul School Management System up to 2.6.5.Check if you run itEPSS 0.28%Nov 30, 2025
- Medium4.8@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify…Open the advisoryNov 17, 2025
- Low2.0A vulnerability was identified in code-projects Student Information System 2.0.Check if you run itEPSS 0.28%Nov 16, 2025
- Low2.1A vulnerability was determined in code-projects Student Information System 2.0.Check if you run itEPSS 0.39%Nov 16, 2025
- Low1.9A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0.Check if you run itEPSS 0.29%Nov 14, 2025
- Low2.0A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320.Check if you run itEPSS 0.25%Nov 14, 2025
- Low2.0A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728.Check if you run itEPSS 0.25%Nov 14, 2025
- Medium6.1Astro is a web framework.Open the advisoryNov 13, 2025
- Medium5.1A security flaw has been discovered in soerennb eXtplorer up to 2.1.15.Check if you run itEPSS 0.27%Nov 12, 2025
- High7.2The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to…Check if you run itEPSS 0.39%Nov 12, 2025
- Medium6.5Reflected cross-site scripting vulnerability in Apache OFBiz.Open the advisoryNov 12, 2025
- High7.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.27%Nov 12, 2025
- Medium5.1The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious…Check if you run itEPSS 0.21%Nov 12, 2025
- Medium4.8The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript…Check if you run itEPSS 0.23%Nov 12, 2025
- Medium4.4The MembershipWorks – Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and in…Check if you run itEPSS 0.25%Nov 12, 2025
- Low2.4Monkeytype is a minimalistic and customizable typing test.Check if you run itEPSS 0.26%Sep 25, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored XSS.Open the advisorySep 23, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tapfiliate Tapfiliate tapfiliate allows Stored XSS.This issue aff…Open the advisorySep 22, 2025