Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A weakness has been identified in Tenda i3 1.0.0.6(2204).Check if you run itEPSS 0.66%Apr 9, 2026
- Medium5.1A security flaw has been discovered in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.21%Apr 9, 2026
- Medium5.1A vulnerability was identified in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.21%Apr 9, 2026
- Medium5.1A vulnerability was determined in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.21%Apr 9, 2026
- Medium6.4The UsersWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.2.60.Check if you run itEPSS 0.24%Apr 9, 2026
- Medium6.4The Ultimate FAQ Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via FAQ content in all versions up to, and including, 2.4.7.Check if you run itEPSS 0.24%Apr 9, 2026
- Critical9.8The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1.Patch nowKEVEPSS 8.09%Apr 9, 2026
- Medium6.9A vulnerability was found in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium4.8A vulnerability has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.21%Apr 9, 2026
- Medium4.8A flaw has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.21%Apr 9, 2026
- Medium4.8A vulnerability was detected in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.21%Apr 9, 2026
- Medium4.4The Experto Dashboard for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings fields (including 'Navigation Font Size', 'NavigatCheck if you run itEPSS 0.21%Apr 9, 2026
- Medium4.3The MStore API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.18.3.Check if you run itEPSS 0.23%Apr 9, 2026
- Medium6.4The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the 'wpdm_members' shortcode in versions up to and including 3.3.5Check if you run itEPSS 0.31%Apr 9, 2026
- Medium6.4The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_name' and 'file_color_list' shortcode attribute of the [osm_map_v3] shortcCheck if you run itEPSS 0.24%Apr 9, 2026
- Medium5.4The Ziggeo plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium4.8A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1.Check if you run itEPSS 0.74%Apr 9, 2026
- Medium6.9A weakness has been identified in atototo api-lab-mcp up to 0.2.1.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium5.3A security flaw has been discovered in Agions taskflow-ai up to 2.1.8.Check if you run itEPSS 1.24%Apr 9, 2026
- High8.7A vulnerability was identified in Tenda AC15 15.03.05.18.Check if you run itEPSS 0.64%Apr 9, 2026
- High8.8The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4.Check if you run itEPSS 0.59%Apr 9, 2026
- Medium6.9A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium6.9A vulnerability was found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.33%Apr 9, 2026
- Medium6.9A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Medium5.3A flaw has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.37%Apr 9, 2026
Sort