Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Tour & Activity Operator Plugin for TourCMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of the tourcms_doc_link sh…Check if you run itEPSS 0.24%Mar 21, 2026
- Medium6.1The Comment Genius plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.2.5 due to insufficie…Check if you run itEPSS 0.27%Mar 21, 2026
- Medium6.4The Schema Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.0 due to insu…Check if you run itEPSS 0.16%Mar 21, 2026
- Medium6.4The PQ Addons – Creative Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget attributes in all versions up to, and including…Check if you run itEPSS 0.19%Mar 21, 2026
- Medium4.4The Mandatory Field plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.8 due to insufficien…Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.4The Multi Post Carousel by Category plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slides' shortcode attribute in all versions up to, and i…Check if you run itEPSS 0.24%Mar 21, 2026
- Medium4.4The Survey plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input san…Check if you run itEPSS 0.24%Mar 21, 2026
- Medium6.4The WPFAQBlock– FAQ & Accordion Plugin For Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter of the 'wpfaqblock' sh…Check if you run itEPSS 0.24%Mar 21, 2026
- Medium6.4The Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt text in…Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.1The WP-WebAuthn plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the AJAX endpoint in all versions up to, and including, 1.3.4 due…Check if you run itEPSS 0.27%Mar 21, 2026
- Medium6.4The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.37%Mar 21, 2026
- Medium4.4The Keep Backup Daily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the backup title alias ( parameter) in the AJAX action in all versions up t…Check if you run itEPSS 0.34%Mar 21, 2026
- Medium6.1The iTracker360 plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in all versions up to and including 2.2.0.Check if you run itEPSS 0.40%Mar 21, 2026
- Medium6.4The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18.Check if you run itEPSS 0.37%Mar 21, 2026
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.55%Mar 21, 2026
- Medium6.4The Image Alt Text Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.8.2.Check if you run itEPSS 0.34%Mar 21, 2026
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14.Check if you run itEPSS 0.21%Mar 21, 2026
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including, 3.1.14.Check if you run itEPSS 0.26%Mar 21, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.29%Mar 20, 2026
- Medium6.1NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium5.3Avo is a framework to create admin panels for Ruby on Rails apps.Check if you run itEPSS 0.35%Mar 20, 2026
- High8.7Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.38%Mar 20, 2026
- Medium5.3PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium5.4SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.Check if you run itEPSS 0.16%Mar 20, 2026
- Low2.0A security flaw has been discovered in atjiu pybbs 6.0.0.Check if you run itEPSS 0.34%Mar 20, 2026