Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocom…Check if you run itEPSS 0.21%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Reflected XSS.This issue a…Check if you run itEPSS 0.21%Feb 20, 2026
- High7.1Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directo…Check if you run itEPSS 0.34%Feb 20, 2026
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in Shiprocket Shiprocket shiprocket allows Exploiting Incorrectly Configured Access Control Security Lev…Check if you run itEPSS 0.35%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Leadpages Leadpages leadpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadpag…Check if you run itEPSS 0.27%Feb 20, 2026
- High7.5Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels…Check if you run itEPSS 0.34%Feb 20, 2026
- High7.3Missing AuthorizationPatch nowKEVEPSS 0.64%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…Check if you run itEPSS 0.24%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atlas Gondal Export Media URLs export-media-urls allows Reflected…Check if you run itEPSS 0.31%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.29%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faraz sms افزونه پیامک حرفه ای فراز اس ام اس farazsms allows Refl…Check if you run itEPSS 0.21%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Securi…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LC…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control S…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Security Leve…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Addonify Addonify – Compare Products For WooCommerce addonify-compare-products allows Exploiting Incorrectly Configured Access C…Check if you run itEPSS 0.38%Feb 20, 2026
- High7.3Missing Authorization vulnerability in soporteblue Plugin BlueX for WooCommerce bluex-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security…Check if you run itEPSS 0.37%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…Check if you run itEPSS 0.38%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…Check if you run itEPSS 0.35%Feb 20, 2026
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue…Check if you run itEPSS 0.37%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…Check if you run itEPSS 0.35%Feb 20, 2026
- High8.8Authentication Bypass Using an Alternate Path or Channel vulnerability in kamleshyadav Miraculous Elementor miraculous-el allows Authentication Abuse.This issue affect…Check if you run itEPSS 0.42%Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.Check if you run itEPSS 0.45%Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.Check if you run itEPSS 0.45%Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.Check if you run itEPSS 0.61%Feb 20, 2026
Sort