Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exposure in all versions up to, and including, 3.35.7.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium5.5A weakness has been identified in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.27%Mar 26, 2026
- High7.4A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938.Check this weekEPSS 10.89%Mar 26, 2026
- High7.0Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD.Check if you run itEPSS 0.18%Mar 26, 2026
- Medium6.9A vulnerability was detected in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium6.4The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the and shortcodes in all versions up to, and including,Check if you run itEPSS 0.25%Mar 26, 2026
- Medium5.5A vulnerability has been found in SourceCodester Food Ordering System 1.0.Check if you run itEPSS 0.27%Mar 26, 2026
- Medium6.4The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdc_menu' shortcode in all versions up to, and including, 2.3.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.2The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP header in all versions up to and including 3.8.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium5.3The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21.Check if you run itEPSS 0.49%Mar 26, 2026
- High8.8The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 9.1.2.Patch nowKEVEPSS 0.50%Mar 26, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all versions up to, and including, 8.8.2.Check if you run itEPSS 0.26%Mar 26, 2026
- Low2.1A vulnerability was detected in code-projects Accounting System 1.0.Check if you run itEPSS 0.20%Mar 26, 2026
- Low2.0A security vulnerability has been detected in code-projects Accounting System 1.0.Check if you run itEPSS 0.20%Mar 26, 2026
- Medium6.9A flaw has been found in SourceCodester Malawi Online Market 1.0.Check if you run itEPSS 0.27%Mar 26, 2026
- Medium5.4The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post_title in all versions up to, and including, 6.4.3.Check if you run itEPSS 0.18%Mar 26, 2026
- Medium6.4The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'baf_sbox' shortcode in all versions up to and including 1.1.1.Check if you run itEPSS 0.21%Mar 26, 2026
- Medium6.1The FloristPress for Woo – Customize your eCommerce store for your Florist plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'noresults' parameter in allCheck if you run itEPSS 0.28%Mar 26, 2026
- High7.2The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the 'post_content' of admin_form posts in all versions up to, andCheck if you run itEPSS 0.56%Mar 26, 2026
- Low1.9A weakness has been identified in Orc discount up to 3.0.1.2.Check if you run itEPSS 0.13%Mar 26, 2026
- Low2.9A security flaw has been discovered in kalcaddle kodbox 1.64.Check if you run itEPSS 0.50%Mar 26, 2026
- Critical9.8Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution.Check if you run itEPSS 0.86%Mar 26, 2026
- High8.6An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary system commandsCheck if you run itEPSS 0.94%Mar 26, 2026
- High8.8The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6.Check if you run itEPSS 0.37%Mar 26, 2026
Sort