Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Permalinks Cascade plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.2.Check if you run itEPSS 0.24%Nov 18, 2025
- Medium6.4The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion Block's attributes in all versions up to, and includingCheck if you run itEPSS 0.24%Nov 18, 2025
- High8.8The WP Dropzone plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, and including, 1.1.0 via the function.Check if you run itEPSS 0.66%Nov 18, 2025
- Medium4.3The WP Admin Microblog plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1.Check if you run itEPSS 0.13%Nov 18, 2025
- Medium6.4The Gutenify – Visual Site Builder Blocks & Site Templates.Check if you run itEPSS 0.20%Nov 18, 2025
- Medium4.3The Top Friends plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.Check if you run itEPSS 0.13%Nov 18, 2025
- Medium6.4The Local Syndication plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5a via the parameter in the shortcode.Check if you run itEPSS 0.25%Nov 18, 2025
- Medium6.4The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all versions up to, and including, 4.2 due to insufficient input sCheck if you run itEPSS 0.20%Nov 18, 2025
- Medium6.1The Like-it plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.Check if you run itEPSS 0.16%Nov 18, 2025
- Medium4.3The Coil Web Monetization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2.Check if you run itEPSS 0.17%Nov 18, 2025
- High8.1The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_classic function.Check if you run itEPSS 0.70%Nov 18, 2025
- High7.1The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' parameter in versions up to, and including, 1.1.10.Check if you run itEPSS 0.28%Nov 18, 2025
- High7.2The Multiple Roles per User plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mrpu_add_multiple_roles_ui' and 'mrpu_Check if you run itEPSS 0.39%Nov 18, 2025
- High7.2There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F.Check if you run itEPSS 0.36%Nov 18, 2025
- Medium5.5Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library.Check if you run itEPSS 0.34%Nov 18, 2025
- High7.7Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting ApplicatioCheck if you run itEPSS 0.15%Nov 18, 2025
- Medium6.4The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vkExUnit_cta_url' and 'vkExUnit_cta_button_text' parameters in all versiCheck if you run itEPSS 0.25%Nov 18, 2025
- Medium6.4The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_veu_custom_css' parameter in all versions up to, and including, 9.112.1Check if you run itEPSS 0.25%Nov 18, 2025
- High7.2There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F.Check if you run itEPSS 0.36%Nov 18, 2025
- Medium5.4Stack-based buffer overflow in the SMASH-CLP shell.Check if you run itEPSS 0.29%Nov 18, 2025
- Medium5.4The Post Type Switcher plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.0 due to missing validation on a user controlledCheck if you run itEPSS 0.31%Nov 18, 2025
- High8.0Android Security Bulletin—November 2025 | Android Open Source ProjectCheck if you run itEPSS 0.87%Nov 18, 2025
- Low2.4Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack againstCheck if you run itEPSS 0.17%Nov 18, 2025
- Medium5.7Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise interCheck if you run itEPSS 0.16%Nov 18, 2025
- Medium5.7Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further sCheck if you run itEPSS 0.16%Nov 18, 2025
Sort