Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matias Ventura Gutenberg gutenberg allows Stored XSS.This issue affects GutenbCheck if you run itEPSS 0.17%Oct 31, 2025
- High8.8Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through <= 3.7.3.Check if you run itEPSS 0.36%Oct 31, 2025
- Low2.7Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control SecuriCheck if you run itEPSS 0.23%Oct 31, 2025
- Medium4.3Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank MathCheck if you run itEPSS 0.22%Oct 31, 2025
- Low3.8Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RankCheck if you run itEPSS 0.24%Oct 31, 2025
- Medium4.5A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view pCheck if you run itEPSS 0.48%Oct 31, 2025
- Medium6.3Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections.Check if you run itEPSS 0.32%Oct 31, 2025
- High8.8Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability.Check if you run itEPSS 0.33%Oct 31, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() The comedi_buf_munge() function performs a modulo operation witCheck if you run itEPSS 0.21%Oct 31, 2025
- High7.5The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9.Check if you run itEPSS 0.30%Oct 31, 2025
- Medium5.3The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'erifl_file' AJAX action in all versions up to, andCheck if you run itEPSS 0.26%Oct 31, 2025
- High7.4When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users.Check if you run itEPSS 0.57%Oct 31, 2025
- Medium5.4Malicious content from E-Mail can be used to perform a redressing attack.Check if you run itEPSS 0.19%Oct 31, 2025
- High7.5Malicious or unintentional API requests can be used to add significant amount of data to caches.Check if you run itEPSS 0.37%Oct 31, 2025
- High7.5Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords written to error logs and forwarded to log sinks when log level is INFO/DEBUG.Check if you run itEPSS 0.48%Oct 31, 2025
- Medium4.3The Depicter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 4.0.4.Check if you run itEPSS 0.17%Oct 31, 2025
- Medium5.3The OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.Check if you run itEPSS 0.34%Oct 31, 2025
- Medium4.3The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'tec_qr_code_modal' AJAX endpoint in all versions up to,Check if you run itEPSS 0.24%Oct 31, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Abis Technology BAPSIS allows Blind SQL Injection.Check if you run itEPSS 0.37%Oct 31, 2025
- Medium6.8The Zombify plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5.Check if you run itEPSS 0.40%Oct 31, 2025
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.95%Oct 31, 2025
- High8.8The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the save_fields() function in all versionsCheck if you run itEPSS 0.70%Oct 31, 2025
- High8.6FutureNet MA and IP-K series provided by Century Systems Co., Ltd.Check if you run itEPSS 1.23%Oct 31, 2025
- Medium6.9FutureNet MA and IP-K series provided by Century Systems Co., Ltd.Check if you run itEPSS 0.32%Oct 31, 2025
- Medium6.4The Qzzr Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qzzr' shortcode in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.23%Oct 31, 2025
Sort