Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog.Check if you run itEPSS 0.25%May 4, 2026
- Medium5.7Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent functionCheck if you run itEPSS 0.47%May 4, 2026
- Critical9.8Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Company…Check if you run itEPSS 0.33%May 4, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.34%May 4, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.34%May 4, 2026
- High7.2The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_fo…Check if you run itEPSS 0.32%May 3, 2026
- Low2.0A vulnerability was determined in kerwincui FastBee up to 1.2.1.Check if you run itEPSS 0.33%May 3, 2026
- Medium6.4The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwcty_current_date' shortcode i…Check if you run itEPSS 0.19%May 2, 2026
- Medium5.8The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter in all versions up to, and including, 6.7.1.29…Check if you run itEPSS 0.37%May 2, 2026
- Medium5.4The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_svg' parame…Check if you run itEPSS 0.24%May 2, 2026
- Medium5.4The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping…Check if you run itEPSS 0.24%May 2, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- Medium6.4The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…Check if you run itEPSS 0.36%May 2, 2026
- Medium4.4The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2.0 due…Check if you run itEPSS 0.33%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Consent field hidden inputs in versions up to and including 2.10.0.Check if you run itEPSS 0.31%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.30%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.33%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.32%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.30%May 2, 2026
- Medium6.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHo…Check if you run itEPSS 0.42%May 2, 2026
- Medium6.4The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 8.9.2.Check if you run itEPSS 0.35%May 2, 2026
- Medium6.4The Maxi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API endpoint in all versions up to, and including, 2.1.9 due to insuffic…Check if you run itEPSS 0.42%May 2, 2026
- Low2.1A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.Check if you run itEPSS 0.47%May 1, 2026
- Medium6.1Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90.Check if you run itEPSS 0.35%May 1, 2026
- Medium4.8Cross-Site Scripting (XSS) in V2Board thru 1.7.4.Check if you run itEPSS 0.29%May 1, 2026