Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execut…Check if you run itEPSS 0.61%Apr 8, 2026
- Low2.0A flaw has been found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.33%Apr 8, 2026
- Medium5.3A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c.Check if you run itEPSS 0.49%Apr 8, 2026
- Low2.0A security vulnerability has been detected in code-projects Easy Blog Site 1.0.Check if you run itEPSS 0.33%Apr 8, 2026
- Medium6.4The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versio…Check if you run itEPSS 0.33%Apr 8, 2026
- Medium5.1Hayabusa versions prior to 3.8.0 contain a cross-site scripting (XSS) vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript w…Check if you run itEPSS 0.35%Apr 8, 2026
- Medium6.4The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elevation-track' shortcode in all versions up to, and including, 4.14.Check if you run itEPSS 0.35%Apr 8, 2026
- High8.5AIL framework is an open-source platform to collect, crawl, process and analyse unstructured data.Check if you run itEPSS 0.30%Apr 8, 2026
- Medium5.4immich is a high performance self-hosted photo and video management solution.Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.4LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.4LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.27%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.25%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.25%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium6.4The Page Builder: Pagelayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget's Custom Attributes field in all versions up to, an…Check if you run itEPSS 0.34%Apr 8, 2026
- Medium6.1Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entriesCheck if you run itEPSS 0.37%Apr 8, 2026
- Medium6.4The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings[js]' parameter in v…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.4The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wsm_showDayStatsGraph' shortcode in a…Check if you run itEPSS 0.36%Apr 8, 2026
- Medium6.4The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in all versions up to, and including, 5.1.3.Check if you run itEPSS 0.51%Apr 8, 2026
- Medium6.4The pdfl.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pdflio' shortcode in all versions up to, and including, 1.0.5.Check if you run itEPSS 0.35%Apr 8, 2026
- Medium6.4The PrivateContent Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' shortcode attribute in the [pc-login-form] shortcode in all v…Check if you run itEPSS 0.36%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UiCore UiCore Elements uicore-elements allows Stored XSS.This iss…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-ele…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elfsight Elfsight WhatsApp Chat CC elfsight-whatsapp-chat allows…Check if you run itEPSS 0.22%Apr 8, 2026