Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute a…Check if you run itEPSS 0.18%Mar 23, 2026
- Medium4.8A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute a…Check if you run itEPSS 0.18%Mar 23, 2026
- Low1.9A vulnerability was determined in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 23, 2026
- Low1.9A vulnerability was found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 23, 2026
- Medium6.4The Sina Extension for Elementor (Header Builder, Footer Builter, Theme Builder, Slider, Gallery, Form, Modal, Data Table Free Elementor Widgets & Elementor Templates)…Check if you run itEPSS 0.16%Mar 23, 2026
- Low1.9A vulnerability has been found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 23, 2026
- Low1.9A flaw has been found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 23, 2026
- Low2.1A vulnerability was detected in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.45%Mar 22, 2026
- High8.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Mar 22, 2026
- Low1.9A vulnerability was determined in Wavlink WL-WN578W2 221110.Check if you run itEPSS 0.41%Mar 22, 2026
- Medium6.4The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the block attribute in a…Check if you run itEPSS 0.33%Mar 22, 2026
- Medium6.1SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.Check if you run itEPSS 0.14%Mar 22, 2026
- Low2.1A weakness has been identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.45%Mar 21, 2026
- Medium4.4The Review Map by RevuKangaroo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.7 due…Check if you run itEPSS 0.41%Mar 21, 2026
- Medium6.4The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cat', 'nocat', and 'text' shortcode attributes of the 'wp_random_button…Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.4The fyyd podcast shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fyyd-podcast', 'fyyd-episode', and 'fyyd' shortcodes in all vers…Check if you run itEPSS 0.43%Mar 21, 2026
- Medium6.4The Ecover Builder For Dummies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'ecover' shortcode in all versions up to…Check if you run itEPSS 0.35%Mar 21, 2026
- Medium6.4The WordPress PayPal Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'donate' shortcode in all versions up to, and including, 1.01.Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.1The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'naam' parameter in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.43%Mar 21, 2026
- Medium6.4The Ad Short plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ad' shortcode's 'client' attribute in all versions up to and including 2.0.1.Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.4The Show Posts list – Easy designs, filters and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_type' shortcode attribute in the '…Check if you run itEPSS 0.41%Mar 21, 2026
- Medium6.4The Text Toggle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute of the [tt_part] and [tt] shortcodes in all versi…Check if you run itEPSS 0.41%Mar 21, 2026
- Medium6.4The WP Games Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [game] shortcode in all versions up to and including 0.1beta.Check if you run itEPSS 0.41%Mar 21, 2026
- Medium6.4The Sheets2Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titles' shortcode attribute in the [sheets2table-render-table] shortcode in…Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.4The Paypal Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'amount' and 'name' shortcode attributes in all versions up to, and including, 0.3.Check if you run itEPSS 0.35%Mar 21, 2026