Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows DOM-Based XSS.This issueCheck if you run itEPSS 0.19%Mar 13, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affectsCheck if you run itEPSS 0.21%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in wpradiant Chocolate House chocolate-house allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChocolatCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer allows Server Side Request Forgery.This issue affects Embed PDF Viewer: from n/a tCheck if you run itEPSS 0.18%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in MadrasThemes MAS Videos masvideos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAS Videos: fromCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Restaurant and Cafe restaurant-and-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel AgencCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PerfCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in desertthemes Corpiva corpiva allows Cross Site Request Forgery.This issue affects Corpiva: from n/a through <= 1.0.96.Check if you run itEPSS 0.13%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Easy Table of Contents easy-table-of-contents allows Cross Site Request Forgery.This issue affects Easy Table of ContenCheck if you run itEPSS 0.13%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.1.2.Check if you run itEPSS 0.13%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Benevolent benevolent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Benevolent: from nCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BusiCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes AnCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This isCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting Incorrectly Configured Access Control Security Levels.ThisCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara BusinesCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The ConferCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobScout: from n/a thrCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a thCheck if you run itEPSS 0.23%Mar 13, 2026
- Medium5.4Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textmetrics: fromCheck if you run itEPSS 0.23%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site Request Forgery.This issue affects Photo Gallery by 10Web: from n/aCheck if you run itEPSS 0.13%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in shufflehound Lemmony lemmony allows Cross Site Request Forgery.This issue affects Lemmony: from n/a through < 1.7.1.Check if you run itEPSS 0.12%Mar 13, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Fox LMS fox-lms allows Blind SQL Injection.This issue affects Fox LMS:Check if you run itEPSS 0.24%Mar 13, 2026
Sort