Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsc_display_product' shortcode in all versions up to, and…Check if you run itEPSS 0.19%Apr 4, 2026
- Medium6.4The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-S…Check if you run itEPSS 0.27%Apr 4, 2026
- Medium6.4The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Widget's 'onClick Event' setting in all…Check if you run itEPSS 0.19%Apr 4, 2026
- Medium6.4The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Icon Box widget in versions up to, and including…Check if you run itEPSS 0.26%Apr 4, 2026
- Medium6.4The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageLoad' parameter in ve…Check if you run itEPSS 0.26%Apr 4, 2026
- Medium6.1Emlog is an open source website building system.Check if you run itEPSS 0.28%Apr 3, 2026
- High8.7Budibase is an open-source low-code platform.Check if you run itEPSS 0.45%Apr 3, 2026
- Low2.0A security flaw has been discovered in Casdoor 2.356.0.Check if you run itEPSS 0.32%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.Check if you run itEPSS 1.03%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report.Check if you run itEPSS 1.03%Apr 3, 2026
- Medium5.4Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report.Check if you run itEPSS 1.02%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report.Check if you run itEPSS 1.03%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report.Check if you run itEPSS 1.03%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report.Check if you run itEPSS 1.03%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.Check if you run itEPSS 1.03%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report.Check if you run itEPSS 1.03%Apr 3, 2026
- Medium6.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.35%Apr 3, 2026
- Medium6.1Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,Check if you run itEPSS 0.24%Apr 3, 2026
- Medium6.1XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API servicesCheck if you run itEPSS 0.25%Apr 2, 2026
- Medium6.1Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute a…Check if you run itEPSS 0.25%Apr 2, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arb…Check if you run itEPSS 0.25%Apr 2, 2026
- High8.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.40%Apr 2, 2026
- Medium5.4hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.24%Apr 2, 2026
- High7.1Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a remote unauthenticated threat actor to execute arbit…Check if you run itEPSS 0.23%Apr 2, 2026
- Low2.0A vulnerability was identified in krayin laravel-crm up to 2.2.Check if you run itEPSS 0.36%Apr 2, 2026