Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 7, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 7, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 7, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 7, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affectsCheck if you run itEPSS 0.22%Jan 7, 2026
- High8.8Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.This issue affects WPCHURCH: from n/a through 2.7.0.Check if you run itEPSS 0.33%Jan 7, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.48%Jan 7, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Hope charity-is-hope allows PHP Local File InclusiCheck if you run itEPSS 0.48%Jan 7, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frenify Arlo arlo allows Reflected XSS.This issue affects Arlo: from n/a throuCheck if you run itEPSS 0.17%Jan 7, 2026
- Medium4.3Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetEngine: from n/Check if you run itEPSS 0.19%Jan 7, 2026
- Medium4.3Missing Authorization vulnerability in themehunk Oneline Lite oneline-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oneline Lite:Check if you run itEPSS 0.18%Jan 7, 2026
- Critical9.1The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default.Check if you run itEPSS 0.25%Jan 7, 2026
- Medium4.4The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 17.0.39 due to insufficient inpuCheck if you run itEPSS 0.33%Jan 7, 2026
- Medium5.3The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inCheck if you run itEPSS 0.22%Jan 7, 2026
- Medium6.4The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'table_currency' parameter in all versions up to, and including, 5.1.12 due tCheck if you run itEPSS 0.26%Jan 7, 2026
- Medium4.3The Simcast plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.17%Jan 7, 2026
- Medium5.3The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized order status modification in all versions up to, and including, 3.1.4.Check if you run itEPSS 0.40%Jan 7, 2026
- Medium6.4The AD Sliding FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliding_faq' shortcode in all versions up to, and including, 2.4 due to insufficient iCheck if you run itEPSS 0.31%Jan 7, 2026
- Medium6.4The 1180px Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in all versions up to, and including, 1.1.1 due to insufCheck if you run itEPSS 0.25%Jan 7, 2026
- Medium6.4The Easy GitHub Gist Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the gist shortcode in all versions up to, and including,Check if you run itEPSS 0.22%Jan 7, 2026
- Medium6.4The EDD Download Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'edd_download_info_link' shortcode in all versions up to, and including, 1.1 due toCheck if you run itEPSS 0.22%Jan 7, 2026
- Medium4.4The Email Customizer for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email template content in all versions up to, and including, 2.6.7 due toCheck if you run itEPSS 0.33%Jan 7, 2026
- Medium6.4The Smart App Banners plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'size' and 'verticalalign' parameters of the 'app-store-download' shortcode in all vCheck if you run itEPSS 0.28%Jan 7, 2026
- High7.5The Yoco Payments plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.9.0 via the file parameter.Check if you run itEPSS 1.82%Jan 7, 2026
- High7.5The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'send_test_email' AJAX action in all versions up to,Check if you run itEPSS 0.42%Jan 7, 2026
Sort