Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including, 3.1.14.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium6.4The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.22%Mar 20, 2026
- Medium4.4The Keep Backup Daily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the backup title alias ( parameter) in the AJAX action in all versions up to, and includCheck if you run itEPSS 0.22%Mar 20, 2026
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.34%Mar 20, 2026
- Medium5.5A vulnerability was identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.27%Mar 20, 2026
- High7.5SiYuan is a personal knowledge management system.Check if you run itEPSS 3.33%Mar 20, 2026
- Low1.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%Mar 20, 2026
- Medium4.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%Mar 20, 2026
- Medium5.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.20%Mar 20, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.17%Mar 20, 2026
- High8.2barebox is a bootloader.Check if you run itEPSS 0.11%Mar 20, 2026
- Medium6.1NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.38%Mar 20, 2026
- Low2.1Nhost is an open source Firebase alternative with GraphQL.Check if you run itEPSS 0.18%Mar 20, 2026
- Medium5.3Avo is a framework to create admin panels for Ruby on Rails apps.Check if you run itEPSS 0.27%Mar 20, 2026
- High7.5SimpleJWT is a simple JSON web token library written in PHP.Check if you run itEPSS 0.50%Mar 20, 2026
- High7.5SiYuan is a personal knowledge management system.Check if you run itEPSS 0.53%Mar 20, 2026
- Medium6.8SiYuan is a personal knowledge management system.Check if you run itEPSS 0.52%Mar 20, 2026
- Medium4.8Halloy is an IRC application written in Rust.Check if you run itEPSS 0.18%Mar 20, 2026
- High8.7Halloy is an IRC application written in Rust.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.31%Mar 20, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.44%Mar 20, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.42%Mar 20, 2026
Sort