Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4…Check if you run itEPSS 0.26%Apr 18, 2026
- Medium5.4The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.1, via the 'z_taxonomy_image' shortcode.Check if you run itEPSS 0.25%Apr 18, 2026
- Medium6.4The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_block shortcode in all versions up t…Check if you run itEPSS 0.19%Apr 18, 2026
- Medium6.4The Flipbox Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flipbox widget's button URL field in all versions up to, and…Check if you run itEPSS 0.33%Apr 18, 2026
- Medium6.4The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up to, and i…Check if you run itEPSS 0.43%Apr 18, 2026
- Critical9.0Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.26%Apr 18, 2026
- Medium6.1The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode_id' parameter in all versions up to, and including, 1.1.6 due to ins…Check if you run itEPSS 0.32%Apr 18, 2026
- Medium6.4The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkin_place_id' parameter in all versions up to, and including, 1.3.6 due to i…Check if you run itEPSS 0.19%Apr 18, 2026
- Medium4.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.24%Apr 18, 2026
- Medium5.4ChurchCRM is an open-source church management system.Check if you run itEPSS 0.29%Apr 18, 2026
- Medium5.4Kimai is an open-source time tracking application.Check if you run itEPSS 0.25%Apr 17, 2026
- Medium6.4The Pz-LinkCard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blogcard' shortcode attributes in all versions up to, and including, 2.5.8.1…Check if you run itEPSS 0.24%Apr 17, 2026
- Medium5.1wger is a free, open-source workout and fitness manager.Check if you run itEPSS 0.25%Apr 17, 2026
- Medium6.1zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.26%Apr 17, 2026
- Medium4.7DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+.Check if you run itEPSS 0.44%Apr 17, 2026
- High7.5WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.36%Apr 17, 2026
- Medium6.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.39%Apr 17, 2026
- Medium6.4WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.44%Apr 17, 2026
- Medium6.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.Check if you run itEPSS 0.24%Apr 17, 2026
- High7.6WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.30%Apr 17, 2026
- Low2.0A flaw has been found in lukevella rallly up to 4.7.4.Check if you run itEPSS 0.36%Apr 17, 2026
- Low2.0A vulnerability was detected in classroombookings up to 2.17.0.Check if you run itEPSS 0.36%Apr 17, 2026
- Medium4.8Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Check if you run itEPSS 0.24%Apr 17, 2026
- Medium4.4The VideoZen plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.1.Check if you run itEPSS 0.31%Apr 17, 2026
- Medium6.4The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagram_follow_text' setting in all…Check if you run itEPSS 0.33%Apr 17, 2026