Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Playerzbr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'urlmeta' post meta field in all versions up to, and including, 1.6 due to insufficient inpuCheck if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rprogress shortcode in versions less than, or equal to, 1.0 due to inCheck if you run itEPSS 0.23%Oct 22, 2025
- Medium4.9The Email Tracker – Email Log, Email Open Tracking, Email Analytics & Email Management for WordPress Emails plugin for WordPress is vulnerable to SQL Injection via the 'orderby' paCheck if you run itEPSS 0.37%Oct 22, 2025
- Medium6.4The Simple Business Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'simple_business_data' shortcode attributes in all versions up to, and including, 1.0Check if you run itEPSS 0.19%Oct 22, 2025
- Medium6.4The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Bg Book Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post meta, rendered through the shortcode, in all versions up to, and including, 1.2Check if you run itEPSS 0.19%Oct 22, 2025
- Medium6.4The WP-Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'roboshot' shortcode in all versions up to, and including, 1.1.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Photographers galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes ( , , , , etc.) in all versions up to, and includingCheck if you run itEPSS 0.19%Oct 22, 2025
- Medium6.4The WP Restaurant Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter of the restaurant_summary shortcode in all versions up to, anCheck if you run itEPSS 0.19%Oct 22, 2025
- Medium6.4The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgrid_skin_content' post meta field in all versions up to, and including, 1.2.1 due to insCheck if you run itEPSS 0.24%Oct 22, 2025
- Medium6.4The SM CountDown Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's smcountdown shortcode in versions less than, or equal to, 1.2 due to insuCheck if you run itEPSS 0.19%Oct 22, 2025
- Medium6.4The Responsive iframe GoogleMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive_map' shortcode in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Simple Youtube Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embed_youtube' shortcode in all versions up to, and including, 1.1.3.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The WP Responsive Meet The Team plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wprm_team' shortcode in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Print Button Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'print-button' shortcode in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Oboxmedia Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_widget' and 'after_widget' parameters of the oboxads-ad-widget shortcode in allCheck if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Mixlr Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mixlr' shortcode in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The This-or-That plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'thisorthat' shortcode in all versions up to, and including, 1.0.4 due to insuffCheck if you run itEPSS 0.24%Oct 22, 2025
- Medium6.4The ST Categories Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's st-categories shortcode in versions less than, or equal to, 1.0.0.Check if you run itEPSS 0.19%Oct 22, 2025
- Medium6.4The WP-Force Images Download plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpfid' shortcode in all versions up to, and including, 1.8.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The Material Design Iconic Font Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdiconic' shortcode in all versions up to, and incluCheck if you run itEPSS 0.19%Oct 22, 2025
- Medium6.4The JB News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'jbticker' shortcode in all versions up to, and includiCheck if you run itEPSS 0.29%Oct 22, 2025
- Medium6.4The WP AD Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'startindex' parameter of the ad-gallery shortcode in all versions up to, and including,Check if you run itEPSS 0.19%Oct 22, 2025
- Medium5.3Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3.Check if you run itEPSS 0.19%Oct 22, 2025
- High7.0Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK.Check if you run itEPSS 0.25%Oct 22, 2025
Sort