Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint.Check this weekEPSS 34.00%Jul 25, 2025
- Medium4.7A flaw was found in libssh, a library that implements the SSH protocol.Check this weekEPSS 24.00%Jul 24, 2025
- Medium6.1The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2.Check this weekEPSS 23.00%Jul 24, 2025
- Medium4.3The iThoughts Advanced Code Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.10.Check this weekEPSS 19.00%Jul 24, 2025
- Medium6.1The FunnelCockpit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘error’ parameter in all versions up to, and including, 1.4.3 due to insufficient inpCheck this weekEPSS 46.00%Jul 24, 2025
- Medium6.1The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.Check this weekEPSS 56.00%Jul 24, 2025
- Critical9.8iqonic wpbookit Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 24, 2025
- Medium6.5The Omnishop plugin for WordPress is vulnerable to Cross-Site Request Forgery on its /users/delete REST route in all versions up to, and including, 1.0.9.Check this weekEPSS 17.00%Jul 23, 2025
- Medium6.1The YANewsflash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check this weekEPSS 13.00%Jul 23, 2025
- Medium4.3HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend.Check this weekEPSS 33.00%Jul 22, 2025
- Medium6.1The Latest Post Accordian Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check this weekEPSS 12.00%Jul 22, 2025
- Medium6.1Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character container component.Check this weekEPSS 31.00%Jul 22, 2025
- Medium6.5Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat component.Check this weekEPSS 48.00%Jul 22, 2025
- High7.6Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI.Check this weekEPSS 26.00%Jul 21, 2025
- Critical9.8An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions and pass a client hostname directly to snprintf as the formatCheck if you run itEPSS 1.32%Jul 21, 2025
- High8.8An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attackerCheck this weekEPSS 52.00%Jul 21, 2025
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 97.01%Jul 21, 2025
- Medium5.1A vulnerability was found in Codecanyon iDentSoft 2.0.Check this weekEPSS 46.00%Jul 20, 2025
- Critical9.2A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to prCheck this weekEPSS 27.00%Jul 18, 2025
- High8.7A vulnerability classified as critical was found in Tenda FH451 1.0.0.9.Check if you run itEPSS 1.01%Jul 18, 2025
- Medium6.9A vulnerability was found in GPAC up to 2.4.Check if you run itEPSS 1.08%Jul 18, 2025
- High8.7A vulnerability, which was classified as critical, was found in Tenda FH451 1.0.0.9.Check this weekEPSS 98.00%Jul 18, 2025
- Medium4.3The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.Check this weekEPSS 14.00%Jul 18, 2025
- Medium6.1The Zuppler Online Ordering plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.0.Check this weekEPSS 13.00%Jul 18, 2025
- High8.7Leviton AcquiSuite and Energy Monitoring Hub are susceptible to a cross-site scripting vulnerability, allowing an attacker to craft a malicious payload in URL parameters, which wouCheck this weekEPSS 38.00%Jul 17, 2025