Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointmentCheck if you run itEPSS 0.32%Feb 14, 2026
- High7.2Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Check if you run itEPSS 0.39%Feb 14, 2026
- High7.5The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0.Check if you run itEPSS 1.05%Feb 14, 2026
- Medium4.3The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0.Check if you run itEPSS 0.15%Feb 14, 2026
- Medium6.4The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code' parameter in the 'ctdoi' shortcode in all versions up to, and including, 0.3.2Check if you run itEPSS 0.18%Feb 14, 2026
- Medium6.1The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 1.2.5 due to insufficient inCheck if you run itEPSS 0.24%Feb 14, 2026
- Medium6.4The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'accordion' shortcode in all versions up to, anCheck if you run itEPSS 0.22%Feb 14, 2026
- Medium6.1The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.3 due to insufficient inCheck if you run itEPSS 0.25%Feb 14, 2026
- High8.1The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05.Check if you run itEPSS 0.55%Feb 14, 2026
- Medium4.4The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AMP Custom CSS setting in all versions up to, andCheck if you run itEPSS 0.24%Feb 14, 2026
- Medium5.3The WP Last Modified Info plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.5.Check if you run itEPSS 0.27%Feb 14, 2026
- Medium5.3The StickEasy Protected Contact Form plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.30%Feb 14, 2026
- Medium4.9The BFG Tools – Extension Zipper plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.7.Check if you run itEPSS 0.42%Feb 14, 2026
- High8.1Caido is a web security auditing toolkit.Check if you run itEPSS 0.32%Feb 13, 2026
- Critical9.8Known is a social publishing platform.Check if you run itEPSS 0.96%Feb 13, 2026
- High7.2The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landingCheck if you run itEPSS 0.34%Feb 13, 2026
- High7.2The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions upCheck if you run itEPSS 0.31%Feb 13, 2026
- High8.8The Starfish Review Generation & Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missCheck if you run itEPSS 0.35%Feb 13, 2026
- High8.5Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class).Check if you run itEPSS 0.09%Feb 13, 2026
- Critical10.0Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001.Check if you run itEPSS 1.05%Feb 13, 2026
- Critical9.3Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program Files (x86)\\Veramark\\VeCheck if you run itEPSS 2.95%Feb 13, 2026
- Medium5.4Vim is an open source, command line text editor.Check if you run itEPSS 0.35%Feb 13, 2026
- High7.8ADB Explorer is a fluent UI for ADB on Windows.Check if you run itEPSS 0.27%Feb 13, 2026
- Critical9.8milvus milvus Missing Authentication for Critical FunctionPatch nowKEVEPSS 38.79%Feb 13, 2026
- High8.1lakeFS is an open-source tool that transforms object storage into a Git-like repositories.Check if you run itEPSS 0.46%Feb 13, 2026
Sort