Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized attachment deletion due to a missing capability check on the function in allCheck if you run itEPSS 0.30%Jan 20, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in IsMyGym by Zuinq Studio.Check if you run itEPSS 0.32%Jan 20, 2026
- Critical9.8The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1.Check if you run itEPSS 1.49%Jan 20, 2026
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in Sesame web application, due to the fact that uploaded SVG images are not properly sanitized.Check if you run itEPSS 0.36%Jan 20, 2026
- Medium5.5An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to improper neutralization of input during web page generationCheck if you run itEPSS 0.25%Jan 20, 2026
- Medium5.3A vulnerability was detected in Bjskzy Zhiyou ERP up to 11.0.Check if you run itEPSS 0.27%Jan 20, 2026
- Medium4.4The WP Hello Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'digit_one' and 'digit_two' parameters in all versions up to, and including, 1.02 due toCheck if you run itEPSS 0.24%Jan 20, 2026
- Medium4.4The Viet contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.2 due to insufficient input sanitizaCheck if you run itEPSS 0.22%Jan 20, 2026
- Medium5.3The weMail - Email Marketing, Lead Generation, Optin Forms, Email Newsletters, A/B Testing, and Automation plugin for WordPress is vulnerable to authorization bypass in all versionCheck if you run itEPSS 0.32%Jan 20, 2026
- High8.1The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in verCheck if you run itEPSS 0.31%Jan 20, 2026
- High8.8Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.32%Jan 20, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.Check if you run itEPSS 0.35%Jan 20, 2026
- High8.8Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.Check if you run itEPSS 0.41%Jan 20, 2026
- Medium5.3The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the get_item_permissions_check funCheck if you run itEPSS 0.29%Jan 20, 2026
- Medium5.3The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'BCF_Google_Fonts_Compatibility'Check if you run itEPSS 0.27%Jan 20, 2026
- Medium4.3The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.1.0.Check if you run itEPSS 0.12%Jan 20, 2026
- Medium5.3The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) plugin for WordPress is vulnerable to unauthorized modification of dataCheck if you run itEPSS 0.26%Jan 20, 2026
- Medium6.3A weakness has been identified in CRMEB up to 5.6.3.Check if you run itEPSS 0.81%Jan 20, 2026
- Medium6.9A security flaw has been discovered in CRMEB up to 5.6.3.Check if you run itEPSS 0.92%Jan 20, 2026
- High8.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.68%Jan 20, 2026
- Low2.3A vulnerability was detected in MineAdmin 1.x/2.x.Check if you run itEPSS 0.36%Jan 20, 2026
- Low2.3A security vulnerability has been detected in MineAdmin 1.x/2.x.Check if you run itEPSS 0.48%Jan 20, 2026
- Critical9.3Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification.Check if you run itEPSS 0.84%Jan 20, 2026
- Low2.3A weakness has been identified in MineAdmin 1.x/2.x.Check if you run itEPSS 0.26%Jan 20, 2026
- High8.1Incorrect Privilege AssignmentPatch nowKEVEPSS 0.40%Jan 20, 2026
Sort