Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.4The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to stored cross-site scrip…May 14, 2026
- Medium6.4The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4.May 14, 2026
- Medium5.1Quark Drive before 0.8.5 contains a stored cross-site scripting vulnerability in the System Configuration page where the template renders push_config key names using V…May 13, 2026
- Medium6.1CubeCart is an ecommerce software solution.May 13, 2026
- Medium4.8CubeCart is an ecommerce software solution.May 13, 2026
- Medium5.0The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack.EPSS 0.1%May 13, 2026
- High8.6Flight is an extensible micro-framework for PHP.May 13, 2026
- Medium4.4A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload…EPSS 0.2%May 13, 2026
- Medium4.7Next.js is a React framework for building full-stack web applications.May 13, 2026
- Medium6.1Next.js is a React framework for building full-stack web applications.May 13, 2026
- Low2.9Astro is a web framework.May 13, 2026
- High8.6jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.May 13, 2026
- Medium5.1Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by exploi…EPSS 0.2%May 13, 2026
- Medium5.1Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted cont…EPSS 0.3%May 13, 2026
- Medium4.8WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by…EPSS 0.3%May 13, 2026
- High7.2The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.5.4.May 13, 2026
- Medium4.8Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices.May 13, 2026
- Medium6.4The Snow Monkey Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-slick' attribute in all versions up to, and including, 24.1.11 d…May 13, 2026
- Medium5.5The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the shortcode in all versions up…EPSS 0.2%May 13, 2026
- Medium6.4The Cost of Goods: Product Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_cog_prod…May 13, 2026
- Medium6.4The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p…May 13, 2026
- Medium4.4The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insufficient i…EPSS 0.2%May 13, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…May 13, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that, in customizable analyt…May 13, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…May 13, 2026