Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The Institute Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Enquiry Form Title' setting in all versions up to, and including, 5.5.Check if you run itEPSS 0.30%Apr 22, 2026
- Medium5.5The Real Estate Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.9 due to insufficien…Check if you run itEPSS 0.24%Apr 22, 2026
- Medium4.4The HTTP Headers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.19.2 due to insufficient…Check if you run itEPSS 0.29%Apr 22, 2026
- Medium5.1DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to execute arbitrary script in…Check if you run itEPSS 0.26%Apr 22, 2026
- Medium6.1GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain cond…Check if you run itEPSS 0.36%Apr 22, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%Apr 21, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Apr 21, 2026
- Medium5.4Docmost is open-source collaborative wiki and documentation software.Check if you run itEPSS 0.23%Apr 21, 2026
- Low2.1mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.98%Apr 21, 2026
- High7.0mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.29%Apr 21, 2026
- High8.9mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.55%Apr 21, 2026
- Critical9.3mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.44%Apr 21, 2026
- Low2.0A vulnerability was determined in Bagisto up to 2.3.15.Check if you run itEPSS 0.33%Apr 21, 2026
- Medium5.1Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability in the search plugin that allows unauthenticated attackers to inject arbitra…Check if you run itEPSS 2.72%Apr 21, 2026
- Low2.0A vulnerability has been found in WebSystems WebTOTUM 2026.Check if you run itEPSS 0.33%Apr 21, 2026
- High8.5FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.41%Apr 21, 2026
- Medium5.7Twenty is an open source CRM.Check if you run itEPSS 0.42%Apr 21, 2026
- Low3.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium6.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.33%Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Check if you run itEPSS 0.16%Apr 21, 2026
- Medium6.1Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint.Check if you run itEPSS 0.31%Apr 21, 2026
- Medium5.1Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki.Check if you run itEPSS 0.29%Apr 21, 2026
- Medium5.3Other issue in the JavaScript Engine component.Check if you run itEPSS 0.34%Apr 21, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System.Check if you run itEPSS 0.53%Apr 21, 2026
- Medium4.4The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.6 due to insufficie…Check if you run itEPSS 0.24%Apr 21, 2026