Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in…Check if you run itEPSS 1.20%Mar 7, 2026
- High7.4Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR reco…Check if you run itEPSS 0.65%Mar 7, 2026
- Medium6.1The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via postMessage in all…Check if you run itEPSS 0.22%Mar 7, 2026
- Medium4.4The LotekMedia Popup Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.6 due to…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium6.4The Show YouTube video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'syv' shortcode in all versions up to, and including, 1.1 due…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium6.4The Infomaniak Connect for OpenID plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'endpoint_login' parameter of the infomaniak_connect_generi…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium6.4The Consensus Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's consensus shortcode in all versions up to, and including, 1.6 du…Check if you run itEPSS 0.21%Mar 7, 2026
- Medium6.4The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all v…Check if you run itEPSS 0.17%Mar 7, 2026
- Medium6.4The DA Media GigList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's damedia_giglist shortcode in all versions up to, and including,…Check if you run itEPSS 0.21%Mar 7, 2026
- Medium6.4The MyQtip – easy qTip2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.0.5 due to…Check if you run itEPSS 0.17%Mar 7, 2026
- Medium6.4The Wueen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 0.2.0 due to insufficient…Check if you run itEPSS 0.17%Mar 7, 2026
- Medium4.3The Guardian News Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.3The Font Pairing Preview For Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.3The True Ranker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.9.Check if you run itEPSS 0.13%Mar 7, 2026
- High7.2The WP App Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app-bar-features' parameter in all versions up to, and including, 1.5.Check if you run itEPSS 0.24%Mar 7, 2026
- Medium4.3The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.4The Carta Online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.13.0 due to insufficient…Check if you run itEPSS 0.20%Mar 7, 2026
- High7.2The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions…Check if you run itEPSS 2.44%Mar 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.31%Mar 7, 2026
- Medium6.9Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.29%Mar 7, 2026
- High8.8Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.48%Mar 7, 2026
- Medium5.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.35%Mar 7, 2026
- Low2.1Defuddle cleans up HTML pages.Check if you run itEPSS 0.27%Mar 7, 2026
- Medium5.3Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.41%Mar 7, 2026
- High8.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.56%Mar 7, 2026
Sort