Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Other issue in the JavaScript Engine component.May 12, 2026
- Medium4.4The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient in…EPSS 0.3%May 12, 2026
- Medium4.4The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to insufficient inpu…EPSS 0.3%May 12, 2026
- High8.5A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…EPSS 0.3%May 12, 2026
- High7.2Affected devices do not properly validate and sanitize filenames on the Firmware Update page.EPSS 0.5%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.EPSS 0.5%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.EPSS 0.5%May 12, 2026
- Medium6.4The Bootstrap Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.0.EPSS 0.3%May 12, 2026
- Medium6.4The Advanced Social Media Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.2.EPSS 0.3%May 12, 2026
- Medium6.1The WP Google Maps Integration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.2.EPSS 0.4%May 12, 2026
- Medium6.1The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.3.EPSS 0.4%May 12, 2026
- Medium6.4The Shortcodely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'widget_area' parameter in all versions up to, and including, 1.0.1 due to in…EPSS 0.3%May 12, 2026
- Medium6.1The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0.EPSS 0.4%May 12, 2026
- High7.2The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_mds AJAX action in all versions up to, and including, 2.2.2.EPSS 0.4%May 12, 2026
- Medium6.4The Credits Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the 'credits' shortcode in all versions up to, and…EPSS 0.3%May 12, 2026
- Medium6.4The scratchblocks for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element' attribute of the 'scratchblocks' shortcode in all versions…EPSS 0.3%May 12, 2026
- Medium6.4The Quick Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' attribute of the 'qtbl' shortcode in all versions up to, and includin…EPSS 0.3%May 12, 2026
- Medium6.4The Voyage Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' attribute of the 'post-content' shortcode in all versions up to, and…EPSS 0.3%May 12, 2026
- Medium6.4The Fancy Image Show plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 9.1 due to insu…EPSS 0.3%May 12, 2026
- Medium6.4The Next Date plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribute in all versions up to, and including, 1.0 due to…EPSS 0.3%May 12, 2026
- Medium6.4The SP Blog Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'design' attribute of the shortcode in all versions up to, and including…EPSS 0.3%May 12, 2026
- Medium4.9The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the parameter in all versions up to, and including, 2.8.1 due t…EPSS 0.3%May 12, 2026
- Medium6.4The BJ Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the function in all versions up to, and including, 1.0.9.EPSS 0.2%May 12, 2026
- Medium6.1SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker…EPSS 0.3%May 12, 2026
- Medium6.1Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an unauthenticated…EPSS 0.3%May 12, 2026