Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Instant Popup Builder plugin for WordPress is vulnerable to Unauthenticated Arbitrary Shortcode Execution in all versions up to and including 1.1.7.Check if you run itEPSS 0.29%Mar 19, 2026
- High8.1Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This i…Check if you run itEPSS 0.29%Mar 19, 2026
- High7.5Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Level…Check if you run itEPSS 0.21%Mar 19, 2026
- Medium5.4A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower.Check if you run itEPSS 0.18%Mar 19, 2026
- Medium6.4The Info Cards – Add Text and Media in Card Layouts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnUrl' parameter within the Info Cards…Check if you run itEPSS 0.23%Mar 19, 2026
- Medium4.3The Add Custom Fields to Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.3.Check if you run itEPSS 0.13%Mar 19, 2026
- Medium6.4The Simple Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' post meta (Custom Field) in all versions up to and including 2.6.2.Check if you run itEPSS 0.26%Mar 19, 2026
- Medium4.3The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'reviewUserStatus' function in all vers…Check if you run itEPSS 0.23%Mar 19, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Tripgo tripgo allows PHP Local File I…Check if you run itEPSS 0.35%Mar 19, 2026
- Medium6.3Missing Authorization vulnerability in UiPress UiPress lite uipress-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UiP…Check if you run itEPSS 0.16%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue aff…Check if you run itEPSS 0.15%Mar 19, 2026
- Medium5.3Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMem…Check if you run itEPSS 0.27%Mar 19, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media WP Rocket allows Stored XSS.This issue affects WP Rocket…Check if you run itEPSS 0.14%Mar 19, 2026
- Critical9.3Cozmoslabs profile_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Mar 19, 2026
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V.Check if you run itEPSS 0.22%Mar 19, 2026
- High8.1Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio -…Check if you run itEPSS 0.32%Mar 19, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fh' (fingerprint) parameter in all versions up to, and including, 5.3…Check if you run itEPSS 0.33%Mar 19, 2026
- Medium5.4IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.5IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.Check if you run itEPSS 0.10%Mar 19, 2026
- Medium5.4IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.0IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.Check if you run itEPSS 0.19%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: tru…Check if you run itEPSS 0.64%Mar 19, 2026
- Medium5.8OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that all…Check if you run itEPSS 0.25%Mar 19, 2026
- High8.3OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass vulnerability in the synology-chat channel plugin where dmPolicy set to allowlist with empty…Check if you run itEPSS 0.33%Mar 19, 2026
- Medium4.4OpenClaw versions prior to 2026.3.1 fail to pin executable identity for non-path-like argv[0] tokens in system.run approvals, allowing post-approval executable rebind attacks.Check if you run itEPSS 0.09%Mar 19, 2026
Sort