Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The Carta Online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.13.0 due to insufficient input sanitizCheck if you run itEPSS 0.22%Mar 7, 2026
- High7.2The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions up to, and inCheck if you run itEPSS 2.67%Mar 7, 2026
- High7.5Homarr is an open-source dashboard.Check if you run itEPSS 1.26%Mar 7, 2026
- Medium5.3Homarr is an open-source dashboard.Check if you run itEPSS 0.48%Mar 7, 2026
- Low2.1Defuddle cleans up HTML pages.Check if you run itEPSS 0.29%Mar 7, 2026
- High8.8The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20.Check if you run itEPSS 0.41%Mar 7, 2026
- Medium5.3Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.43%Mar 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.33%Mar 7, 2026
- Medium6.9Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.32%Mar 7, 2026
- High8.8Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.51%Mar 7, 2026
- Medium5.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.37%Mar 7, 2026
- High8.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.59%Mar 7, 2026
- High7.5express-rate-limit is a basic rate-limiting middleware for Express.Check if you run itEPSS 0.52%Mar 7, 2026
- Medium6.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.25%Mar 7, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check this weekEPSS 37.33%Mar 7, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.47%Mar 7, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check this weekEPSS 14.97%Mar 7, 2026
- High8.2Flowise is a drag & drop user interface to build a customized large language model flow.Check this weekEPSS 16.71%Mar 7, 2026
- High8.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.54%Mar 7, 2026
- High7.5WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Check if you run itEPSS 0.43%Mar 7, 2026
- High7.2The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the method.Check if you run itEPSS 0.43%Mar 7, 2026
- Medium4.8The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.26.1 due to insufficient input sanitizCheck if you run itEPSS 0.22%Mar 7, 2026
- Medium6.1The CM Custom Reports plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date_from' and 'date_to' parameters in all versions up to, and including, 1.2.7Check if you run itEPSS 0.26%Mar 7, 2026
- Medium4.8The MailArchiver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.4.0 due to insufficient input sanitizaCheck if you run itEPSS 0.23%Mar 7, 2026
- Medium4.9The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'ce_venue_name' CSV field in the function in all versions up to, and including, 1.5.8.Check if you run itEPSS 0.37%Mar 7, 2026
Sort