Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak.This issue affects VOD InfomaCheck if you run itEPSS 0.25%Oct 22, 2025
- Medium6.5Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.This issue affects Recipe Card Blocks for Gutenberg & ElemenCheck if you run itEPSS 0.26%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a thCheck if you run itEPSS 0.52%Oct 22, 2025
- High8.8Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privilege Escalation.This issue affects Voice Feedback: from n/a through <= 1.0.3.Check if you run itEPSS 0.38%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weissmike Simple Finance Calculator simple-finance-calculator allows ReflectedCheck if you run itEPSS 0.24%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue affects Single Property: from n/a through <= 2.8.Check if you run itEPSS 0.53%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a thCheck if you run itEPSS 0.58%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Knowledge Base kbase allows Object Injection.This issue affects Knowledge Base: from n/a through <= 2.9.Check if you run itEPSS 0.53%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.Check if you run itEPSS 0.58%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects BugsPatrol: from n/a through <= 1.5.0.Check if you run itEPSS 0.59%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/aCheck if you run itEPSS 0.58%Oct 22, 2025
- High8.8Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships foCheck if you run itEPSS 0.39%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <=Check if you run itEPSS 0.58%Oct 22, 2025
- Critical9.8Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0.Check if you run itEPSS 0.45%Oct 22, 2025
- High7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ypromo PT Luxa Addons pt-luxa-addons allows Path Traversal.This issue affects PT LuxCheck if you run itEPSS 0.43%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8.Check if you run itEPSS 0.58%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Kriya kriya allows Object Injection.This issue affects Kriya: from n/a through <= 3.4.Check if you run itEPSS 0.53%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through < 1.3.0.Check if you run itEPSS 0.51%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13.Check if you run itEPSS 0.58%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.This issue affects VEDA: from n/a through <= 4.2.Check if you run itEPSS 0.53%Oct 22, 2025
- High8.8Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Privilege Escalation.ThCheck if you run itEPSS 0.39%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms - Frontend Listing everest-forms-frontend-listing allows Object Injection.This issue affects Everest FormCheck if you run itEPSS 0.50%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affectsCheck if you run itEPSS 0.58%Oct 22, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in Tusko Trush Advanced Custom Fields : CPT Options Pages acf-cpt-options-pages allows Object Injection.This issue affects AdvancedCheck if you run itEPSS 0.20%Oct 22, 2025
- Critical10.0Improper Control of Generation of Code ('Code Injection') vulnerability in Beplusthemes Alone alone allows Code Injection.This issue affects Alone: from n/a through <= 7.8.3.Check if you run itEPSS 0.49%Oct 22, 2025
Sort