Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nenad Obradovic Extensive VC Addons for WPBake…Check if you run itEPSS 0.66%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soflyy WP Wizard Cloak wp-wizard-cloak allows Reflected XSS.This…Check if you run itEPSS 0.28%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RylanH Storyform storyform allows Reflected XSS.This issue affect…Check if you run itEPSS 0.28%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevstudio Easy Taxonomy Images easy-taxonomy-images allows Stor…Check if you run itEPSS 0.30%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jezza101 bbpress Simple Advert Units bbpress-simple-advert-units…Check if you run itEPSS 0.30%Feb 20, 2026
- High7.6Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…Check if you run itEPSS 0.24%Feb 20, 2026
- High7.7Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-team allows Code Injection.This issue affects Inpe…Check if you run itEPSS 0.29%Feb 20, 2026
- Low3.5HCL Connections is vulnerable to information disclosure.Check if you run itEPSS 0.30%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in desertthemes NewsMash newsmash allows Stored XSS.This issue affec…Check if you run itEPSS 0.26%Feb 20, 2026
- Medium4.3Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects…Check if you run itEPSS 0.32%Feb 20, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Sto…Check if you run itEPSS 0.26%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Sto…Check if you run itEPSS 0.25%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.T…Check if you run itEPSS 0.24%Feb 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows St…Check if you run itEPSS 0.26%Feb 20, 2026
- Medium5.3Missing Authorization vulnerability in SecuPress SecuPress Free secupress.This issue affects SecuPress Free: from n/a through <= 2.2.5.3.Check if you run itEPSS 0.28%Feb 20, 2026
- Medium5.3Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19.Check if you run itEPSS 0.30%Feb 20, 2026
- Critical9.5The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point.Check if you run itEPSS 1.75%Feb 20, 2026
- Low2.3An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing.Check if you run itEPSS 0.32%Feb 20, 2026
- Low2.4An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.Check if you run itEPSS 0.19%Feb 20, 2026
- Medium6.4The Master Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ma_el_bh_table_btn_text' parameter in versions up to, and in…Check if you run itEPSS 0.18%Feb 20, 2026
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc.Check if you run itEPSS 0.35%Feb 20, 2026
- Low2.3Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), e…Check if you run itEPSS 0.52%Feb 20, 2026
- High8.4The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic…Check if you run itEPSS 0.18%Feb 20, 2026
- Medium5.1WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium6.5This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path.Check if you run itEPSS 0.44%Feb 20, 2026
Sort