Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The AIO Forms – Craft Complex Forms Easily plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versiCheck if you run itEPSS 0.66%Oct 24, 2025
- Medium4.3The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_save_blogs' AJAX endpoint in aCheck if you run itEPSS 0.20%Oct 24, 2025
- Medium6.4The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.1Check if you run itEPSS 0.19%Oct 24, 2025
- High7.5The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupaCheck if you run itEPSS 0.33%Oct 24, 2025
- High8.8The IndieAuth plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4.Check if you run itEPSS 0.21%Oct 24, 2025
- Medium6.5The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2.Check if you run itEPSS 0.30%Oct 24, 2025
- Medium6.4The Time Clock – A WordPress Employee & Volunteer Time Clock Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and iCheck if you run itEPSS 0.24%Oct 24, 2025
- Medium4.3The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and includCheck if you run itEPSS 0.20%Oct 24, 2025
- Medium6.3The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifCheck if you run itEPSS 0.27%Oct 24, 2025
- Medium4.3The Disable Content Editor For Specific Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.Check if you run itEPSS 0.13%Oct 24, 2025
- Medium6.1The Multi Item Responsive Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.21%Oct 24, 2025
- Medium4.4The qnotsquiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qnotsquiz_custom_start_text' parameter in all versions up to, and including, 1.0.0 due to iCheck if you run itEPSS 0.21%Oct 24, 2025
- Medium4.8Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in user's webCheck if you run itEPSS 0.18%Oct 24, 2025
- Medium5.1Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's web browseCheck if you run itEPSS 0.20%Oct 24, 2025
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.34%Oct 24, 2025
- High7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin functionCheck if you run itEPSS 0.27%Oct 24, 2025
- High7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme functionCheck if you run itEPSS 0.27%Oct 24, 2025
- High7.6PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme functionCheck if you run itEPSS 0.29%Oct 24, 2025
- Medium5.3PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath functionCheck if you run itEPSS 0.32%Oct 24, 2025
- Medium6.2An issue was discovered in the NDIS Usermode IO driver (RtkIOAC60.sys, version 6.0.5600.16348) allowing local authenticated attackers to send a crafted IOCTL request to the driverCheck if you run itEPSS 0.13%Oct 24, 2025
- Medium6.8An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via suppCheck if you run itEPSS 0.14%Oct 24, 2025
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficieCheck if you run itEPSS 0.23%Oct 23, 2025
- Medium6.3A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.51%Oct 23, 2025
- Medium6.3A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.51%Oct 23, 2025
- High8.3A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.Check if you run itEPSS 0.62%Oct 23, 2025
Sort