Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Av…Check if you run itEPSS 0.18%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium6.5Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…Check if you run itEPSS 0.16%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products…Check if you run itEPSS 0.13%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Event Post themify-event-post allows Stored XSS…Check if you run itEPSS 0.14%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-…Check if you run itEPSS 0.14%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This is…Check if you run itEPSS 0.18%Mar 13, 2026
- Low2.7Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Josh Kohlbach Product Feed PRO for WooCommerce woo-product-feed-pro allows Cross Site Request Forgery.This issue aff…Check if you run itEPSS 0.12%Mar 13, 2026
- Medium5.0Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a thr…Check if you run itEPSS 0.14%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Food: fr…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BigH…Check if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrectly Configured Access Control Security Levels.This is…Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW…Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Photography vw-photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Pet Shop vw-pet-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW P…Check if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Fitness vw-fitness allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Fit…Check if you run itEPSS 0.25%Mar 13, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Contact Form with Paypal cp-contact-form-with-paypa…Check if you run itEPSS 0.23%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Securit…Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Bulk Edit astra-bulk-edit allows DOM-Based…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-f…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-element…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ays Pro Popup Like box ays-facebook-popup-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This i…Check if you run itEPSS 0.24%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Education Lite vw-education-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.26%Mar 13, 2026
Sort