Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A security flaw has been discovered in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.Check if you run itEPSS 0.35%Apr 6, 2026
- Low1.9A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.Check if you run itEPSS 0.35%Apr 6, 2026
- Low2.1A flaw has been found in assafelovic gpt-researcher up to 3.4.3.Check if you run itEPSS 0.45%Apr 6, 2026
- Low2.1A weakness has been identified in assafelovic gpt-researcher up to 3.4.3.Check if you run itEPSS 0.45%Apr 6, 2026
- Low2.1A weakness has been identified in givanz Vvvebjs up to 2.0.5.Check if you run itEPSS 1.00%Apr 6, 2026
- High8.8Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating U…Check if you run itEPSS 0.46%Apr 5, 2026
- Low2.0A vulnerability has been found in Akaunting up to 3.1.21.Check if you run itEPSS 0.33%Apr 5, 2026
- Low2.1A vulnerability was determined in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.45%Apr 5, 2026
- Low2.1A vulnerability was found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.45%Apr 5, 2026
- Low2.1A flaw has been found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.45%Apr 5, 2026
- Low2.1A vulnerability was determined in badlogic pi-mono 0.58.4.Check if you run itEPSS 0.45%Apr 5, 2026
- Medium5.3Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms.Check if you run itEPSS 0.11%Apr 4, 2026
- Medium5.1MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting t…Check if you run itEPSS 0.20%Apr 4, 2026
- Medium5.1MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments.Check if you run itEPSS 0.25%Apr 4, 2026
- Medium5.1MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field.Check if you run itEPSS 0.22%Apr 4, 2026
- Medium5.1MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability.Check if you run itEPSS 0.23%Apr 4, 2026
- High7.2The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_title' parameter in all versions up to, and in…Check if you run itEPSS 0.32%Apr 4, 2026
- Medium6.4The WPFunnels – Easy Funnel Builder To Optimize Buyer Journeys And Get More Leads & Sales plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp…Check if you run itEPSS 0.20%Apr 4, 2026
- High7.2The Widgets for Social Photo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'feed_data' parameter keys in all versions up to, and inclu…Check if you run itEPSS 0.39%Apr 4, 2026
- Medium6.4The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wte_trip_tax' s…Check if you run itEPSS 0.16%Apr 4, 2026
- Medium6.4The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab w…Check if you run itEPSS 0.26%Apr 4, 2026
- Medium6.4The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the su_carousel shortcode in all versions up to, a…Check if you run itEPSS 0.35%Apr 4, 2026
- Medium6.4The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.7.Check if you run itEPSS 0.34%Apr 4, 2026
- Medium6.4The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_text' parameter in all versions up to, and including,…Check if you run itEPSS 0.29%Apr 4, 2026
- Medium6.4The Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsc_display_product' shortcode in all versions up to, and…Check if you run itEPSS 0.19%Apr 4, 2026