Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 10.14.10 via the AJAX action.Check if you run itEPSS 0.37%Jan 9, 2026
- High8.2Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3.Check if you run itEPSS 0.33%Jan 9, 2026
- Medium5.3The weDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.15 via the REST API endpoint.Check if you run itEPSS 0.35%Jan 9, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the (fingerprint) parameter in all versions up to, and including, 5.3.3.Check if you run itEPSS 0.27%Jan 9, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' and 'resource' parameters in all versions up to, and including, 5.3.4 due tCheck if you run itEPSS 0.27%Jan 9, 2026
- Medium6.4The IndieWeb plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Telephone' parameter in all versions up to, and including, 4.0.5 due to insufficient input sCheck if you run itEPSS 0.23%Jan 9, 2026
- Medium6.4The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpgsv_map' shortcode in allCheck if you run itEPSS 0.22%Jan 9, 2026
- Medium5.3The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.49.1 viaCheck if you run itEPSS 0.29%Jan 9, 2026
- Medium6.4The BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bialty_cs_alt' posCheck if you run itEPSS 0.21%Jan 9, 2026
- Medium6.5The BetterDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.3 via the scripts() function.Check if you run itEPSS 0.36%Jan 9, 2026
- Critical9.8dynamiapps frontend_admin Improper Privilege ManagementPatch nowKEVEPSS 0.72%Jan 9, 2026
- Medium5.1Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.Check if you run itEPSS 0.16%Jan 9, 2026
- Low2.1Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.Check if you run itEPSS 0.15%Jan 9, 2026
- Medium5.2Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.Check if you run itEPSS 0.19%Jan 9, 2026
- Medium5.3Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.Check if you run itEPSS 0.46%Jan 9, 2026
- Medium4.8Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.Check if you run itEPSS 0.13%Jan 9, 2026
- High7.3Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.17%Jan 9, 2026
- Medium6.8Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.Check if you run itEPSS 0.14%Jan 9, 2026
- Low2.3Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege.Check if you run itEPSS 0.28%Jan 9, 2026
- Medium6.7Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code.Check if you run itEPSS 0.17%Jan 9, 2026
- Medium6.8The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings.Check if you run itEPSS 0.29%Jan 9, 2026
- Medium4.3The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includinCheck if you run itEPSS 0.15%Jan 9, 2026
- Medium5.3The Japanized for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST API endpoint in all versions upCheck if you run itEPSS 0.26%Jan 9, 2026
- Medium4.3There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products.Check if you run itEPSS 0.26%Jan 9, 2026
- Low2.3Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerability in The Wikimedia Foundation Mediawiki - ApprovedRevs Extension allows Input DCheck if you run itEPSS 0.24%Jan 9, 2026
Sort