Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1.Check if you run itEPSS 0.15%Mar 11, 2026
- Medium6.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the AJAX action.Check if you run itEPSS 0.33%Mar 11, 2026
- Medium5.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the admin action…Check if you run itEPSS 0.33%Mar 11, 2026
- Low0.1An SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.14%Mar 11, 2026
- Low0.1An improper certificate validation vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.08%Mar 11, 2026
- Low2.7A flaw was found in Keycloak.Check if you run itEPSS 0.41%Mar 11, 2026
- Medium6.4The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27.Check if you run itEPSS 0.39%Mar 11, 2026
- Critical9.8The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option without veri…Check if you run itEPSS 0.83%Mar 11, 2026
- High7.1The DukaPress WordPress plugin through 3.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scriptin…Check if you run itEPSS 0.15%Mar 11, 2026
- Critical9.3Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administrative access.Check if you run itEPSS 0.37%Mar 11, 2026
- High8.6Code injection vulnerability exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker with administrative privileges to execute arbitrary commands.Check if you run itEPSS 0.54%Mar 11, 2026
- Medium5.9The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it…Check if you run itEPSS 0.22%Mar 11, 2026
- Critical9.8netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value f…Check if you run itEPSS 0.50%Mar 11, 2026
- Critical9.8A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent…Check if you run itEPSS 0.77%Mar 11, 2026
- Medium6.1The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.7.Check if you run itEPSS 0.10%Mar 11, 2026
- Medium6.1The RTMKit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'themebuilder' parameter in all versions up to, and including, 1.6.8 due to ins…Check if you run itEPSS 0.22%Mar 11, 2026
- UnknownVinga WR-AC1200 Password Parameter VulnerabilityPatch nowKEVEPSS 1.57%Mar 11, 2026
- UnknownASUS asuswrt Missing AuthorizationPatch nowKEVEPSS 85.16%Mar 11, 2026
- Medium4.8Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.25%Mar 10, 2026
- Medium6.9Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.31%Mar 10, 2026
- Medium4.8Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.26%Mar 10, 2026
- High8.6Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.26%Mar 10, 2026
- High8.8GetSimple CMS is a content management system.Check if you run itEPSS 0.33%Mar 10, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier.Check if you run itEPSS 0.23%Mar 10, 2026
- Low2.0RenderBlocking is a MediaWiki extension that allows interface administrators to specify render-blocking CSS and JavaScript.Check if you run itEPSS 0.51%Mar 10, 2026