Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.5.4.May 13, 2026
- Medium4.8Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices.May 13, 2026
- Medium6.4The Snow Monkey Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-slick' attribute in all versions up to, and including, 24.1.11 d…May 13, 2026
- Medium5.5The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the shortcode in all versions up…EPSS 0.2%May 13, 2026
- Medium6.4The Cost of Goods: Product Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_cog_prod…May 13, 2026
- Medium6.4The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p…May 13, 2026
- Medium4.4The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insufficient i…EPSS 0.2%May 13, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…May 13, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that, in customizable analyt…May 13, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…May 13, 2026
- Medium6.1Kyverno is a policy engine designed for cloud native platform engineering teams.May 12, 2026
- Medium5.1Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.May 12, 2026
- Medium5.3ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.May 12, 2026
- High8.7Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…May 12, 2026
- Medium4.8Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…May 12, 2026
- Medium4.8Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…May 12, 2026
- High8.8A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbit…May 12, 2026
- High8.8AntSword is a cross-platform website management toolkit.May 12, 2026
- Medium6.2LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.May 12, 2026
- Low3.3Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.May 12, 2026
- Medium5.0Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.May 12, 2026
- High7.3YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.May 12, 2026
- High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.May 12, 2026
- Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3.EPSS 0.1%May 12, 2026
- Medium5.3Other issue in the JavaScript Engine component.May 12, 2026