Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client confiCheck if you run itEPSS 1.29%Mar 7, 2026
- High7.4Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersCheck if you run itEPSS 0.69%Mar 7, 2026
- High7.5It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressCheck if you run itEPSS 0.46%Mar 7, 2026
- Medium4.3The Guardian News Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.15%Mar 7, 2026
- Medium4.3The Font Pairing Preview For Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.15%Mar 7, 2026
- Medium4.3The True Ranker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.9.Check if you run itEPSS 0.15%Mar 7, 2026
- Medium6.4The Show YouTube video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'syv' shortcode in all versions up to, and including, 1.1 due to insufficiCheck if you run itEPSS 0.22%Mar 7, 2026
- Medium6.4The Infomaniak Connect for OpenID plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'endpoint_login' parameter of the infomaniak_connect_generic_auth_url shCheck if you run itEPSS 0.22%Mar 7, 2026
- Medium6.4The Consensus Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's consensus shortcode in all versions up to, and including, 1.6 due to insufficCheck if you run itEPSS 0.22%Mar 7, 2026
- High7.2The WP App Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app-bar-features' parameter in all versions up to, and including, 1.5.Check if you run itEPSS 0.27%Mar 7, 2026
- Medium4.3The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.15%Mar 7, 2026
- Medium6.4The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all versions up toCheck if you run itEPSS 0.18%Mar 7, 2026
- Medium6.4The DA Media GigList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's damedia_giglist shortcode in all versions up to, and including, 1.9.0 due toCheck if you run itEPSS 0.22%Mar 7, 2026
- Medium6.4The MyQtip – easy qTip2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.0.5 due to insufficientCheck if you run itEPSS 0.18%Mar 7, 2026
- Medium6.1The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via postMessage in all versions upCheck if you run itEPSS 0.24%Mar 7, 2026
- Medium6.4The Wueen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 0.2.0 due to insufficient input sanitizCheck if you run itEPSS 0.18%Mar 7, 2026
- Medium4.4The LotekMedia Popup Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.6 due to insufficientCheck if you run itEPSS 0.22%Mar 7, 2026
- Medium4.4The Carta Online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.13.0 due to insufficient input sanitizCheck if you run itEPSS 0.22%Mar 7, 2026
- High7.2The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions up to, and inCheck if you run itEPSS 2.67%Mar 7, 2026
- High7.5Homarr is an open-source dashboard.Check if you run itEPSS 1.26%Mar 7, 2026
- Medium5.3Homarr is an open-source dashboard.Check if you run itEPSS 0.48%Mar 7, 2026
- Low2.1Defuddle cleans up HTML pages.Check if you run itEPSS 0.29%Mar 7, 2026
- High8.8The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20.Check if you run itEPSS 0.41%Mar 7, 2026
- Medium5.3Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.43%Mar 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.33%Mar 7, 2026
Sort