Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The DA Media GigList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's damedia_giglist shortcode in all versions up to, and including,…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium6.4The MyQtip – easy qTip2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.0.5 due to…Check if you run itEPSS 0.16%Mar 7, 2026
- Medium6.4The Wueen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 0.2.0 due to insufficient…Check if you run itEPSS 0.16%Mar 7, 2026
- High7.2The WP App Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app-bar-features' parameter in all versions up to, and including, 1.5.Check if you run itEPSS 0.24%Mar 7, 2026
- Medium4.4The Carta Online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.13.0 due to insufficient…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium6.9Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.35%Mar 7, 2026
- Low2.1Defuddle cleans up HTML pages.Check if you run itEPSS 0.28%Mar 7, 2026
- Medium4.8The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.26.1 due to insufficient…Check if you run itEPSS 0.33%Mar 7, 2026
- Medium4.8The MailArchiver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.4.0 due to insufficient i…Check if you run itEPSS 0.36%Mar 7, 2026
- Medium6.1The CM Custom Reports plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date_from' and 'date_to' parameters in all versions up to, and incl…Check if you run itEPSS 0.23%Mar 7, 2026
- Medium6.4The Hammas Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apix' parameter in the 'hp-calendar-manage-redirect' shortcode in all ve…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium5.1XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inje…Check if you run itEPSS 0.19%Mar 7, 2026
- Medium5.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.33%Mar 6, 2026
- Low2.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.27%Mar 6, 2026
- Medium6.1Actions which insert URLs into the content attribute of HTML meta tags are not escaped.Check if you run itEPSS 0.35%Mar 6, 2026
- Medium5.4Kestra is an event-driven orchestration platform.Check if you run itEPSS 0.36%Mar 6, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pascal Birchler Preferred Languages allows DOM-Based XSS.T…Check if you run itEPSS 0.17%Mar 6, 2026
- Medium6.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.69%Mar 6, 2026
- Medium6.9HumHub is an Open Source Enterprise Social Network.Check if you run itEPSS 0.34%Mar 6, 2026
- Medium6.1changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.35%Mar 6, 2026
- High8.7Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.25%Mar 6, 2026
- Medium5.4LangBot is a global IM bot platform designed for LLMs.Check if you run itEPSS 0.28%Mar 6, 2026
- Medium5.4Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.32%Mar 6, 2026
- Critical9.0Chamilo is a learning management system.Check if you run itEPSS 0.26%Mar 6, 2026
- Critical9.0Chamilo is a learning management system.Check if you run itEPSS 0.31%Mar 6, 2026