Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Lobot Slider Administrator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.0.Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.1The Post Snippits plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%Mar 21, 2026
- Low3.8The Post Affiliate Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.28.0.Check if you run itEPSS 0.27%Mar 21, 2026
- High7.2The Performance Monitor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.39%Mar 21, 2026
- Medium4.3The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.15%Mar 21, 2026
- Medium4.3The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.3The SR WP Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.3The Redirect countdown plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.3The WP Posts Re-order plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Mar 21, 2026
- High8.3The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.20.Check if you run itEPSS 0.32%Mar 21, 2026
- High8.1The Invelity Product Feeds plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 1.2.6.Check if you run itEPSS 0.18%Mar 21, 2026
- High7.2The WowOptin: Next-Gen Popup Maker plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.29.Check if you run itEPSS 0.50%Mar 21, 2026
- Low2.0OpenClaw versions prior to 2026.2.26 contain an approval context-binding weakness in system.run execution flows with host=node that allows reuse of previously approved…Check if you run itEPSS 0.36%Mar 21, 2026
- High8.7OpenClaw versions 2026.2.22 prior to 2026.2.25 contain a privilege escalation vulnerability allowing unpaired device identities to bypass operator pairing requirements…Check if you run itEPSS 0.67%Mar 21, 2026
- Medium6.1The iTracker360 plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in all versions up to and including 2.2.0.Check if you run itEPSS 0.40%Mar 21, 2026
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.55%Mar 21, 2026
- Medium5.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.42%Mar 21, 2026
- High7.5NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Check if you run itEPSS 1.52%Mar 20, 2026
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.41%Mar 20, 2026
- Critical9.1gRPC-Go is the Go language implementation of gRPC.Check if you run itEPSS 1.69%Mar 20, 2026
- High7.5HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.49%Mar 20, 2026
- High8.7Halloy is an IRC application written in Rust.Check if you run itEPSS 0.47%Mar 20, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.81%Mar 20, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.59%Mar 20, 2026