Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_form_page_url' p…Check if you run itEPSS 0.51%May 6, 2026
- Medium6.4The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and…Check if you run itEPSS 0.26%May 6, 2026
- High7.3The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled.Check if you run itEPSS 0.26%May 6, 2026
- High7.3An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenan…Check if you run itEPSS 0.26%May 6, 2026
- Medium6.1FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin.Check if you run itEPSS 0.25%May 5, 2026
- Medium4.8PhpSpreadsheet is a library for reading and writing spreadsheet files.Check if you run itEPSS 0.24%May 5, 2026
- Medium6.1ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine.Check if you run itEPSS 0.26%May 5, 2026
- Medium4.7ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.Check if you run itEPSS 0.21%May 5, 2026
- Medium5.4Traccar is an open source GPS tracking system.Check if you run itEPSS 0.24%May 5, 2026
- Medium5.1AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads throu…Check if you run itEPSS 0.27%May 5, 2026
- Medium6.4The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagram_follow_text' setting in all…Check if you run itEPSS 0.36%May 5, 2026
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in the wpr_update_form_action_meta AJAX action…Check if you run itEPSS 0.42%May 5, 2026
- Medium6.4The WP Carousel Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted fancybox attributes in all versions up to, and including, 2.7.10.Check if you run itEPSS 0.33%May 5, 2026
- Medium6.1The Blog Settings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.Check if you run itEPSS 0.37%May 5, 2026
- Medium6.1The Zingaya Click-to-Call plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email', 'first_name', 'last_name', and 'phone' parameters on th…Check if you run itEPSS 0.38%May 5, 2026
- Medium6.4The Simple Owl Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'num' attribute of the 'owls_wrapper' shortcode in all versions up…Check if you run itEPSS 0.32%May 5, 2026
- Medium6.4The WP-Clippy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.33%May 5, 2026
- Medium5.5The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper' attribute of the [futureaction]…Check if you run itEPSS 0.36%May 5, 2026
- Medium6.4The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chart…Check if you run itEPSS 0.33%May 5, 2026
- Medium6.4The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'separatorIconSVG' paramete…Check if you run itEPSS 0.26%May 5, 2026
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.51%May 4, 2026
- Medium6.9Dify is an open-source LLM app development platform.Check if you run itEPSS 0.34%May 4, 2026
- Medium4.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.Check if you run itEPSS 0.29%May 4, 2026
- Medium6.0Beets is the media library management system.Check if you run itEPSS 0.53%May 4, 2026
- Critical9.6Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.85%May 4, 2026