Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewardsCheck if you run itEPSS 0.22%Nov 13, 2025
- Medium4.3Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.20%Nov 13, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSSCheck if you run itEPSS 0.18%Nov 13, 2025
- Medium5.4Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP CoCheck if you run itEPSS 0.21%Nov 13, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in ramon fincken Auto Prune Posts auto-prune-posts allows Cross Site Request Forgery.This issue affects Auto Prune Posts: from n/a tCheck if you run itEPSS 0.14%Nov 13, 2025
- Medium5.4Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.21%Nov 13, 2025
- Medium5.3Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheateCheck if you run itEPSS 0.22%Nov 13, 2025
- Medium5.4Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerabilityCheck if you run itEPSS 0.25%Nov 13, 2025
- Medium6.4The WordPress Content Flipper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bgcolor' shortcode attribute of the 'flipper_front' shortcode in all versioCheck if you run itEPSS 0.23%Nov 13, 2025
- Medium5.3The WP Headless CMS Framework plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.15.Check if you run itEPSS 0.36%Nov 13, 2025
- Medium6.4The Angel – Fashion Model Agency WordPress CMS Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting the profile media uploader in all versions up to, and includinCheck if you run itEPSS 0.19%Nov 13, 2025
- Medium6.4The Save as PDF Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's restpackpdfbutton shortcode in all versions up to, and including, 1.9.2 duCheck if you run itEPSS 0.24%Nov 13, 2025
- Medium4.3The Convert WebP & AVIF | Quicq | Best image optimizer and compression plugin | Improve your Google Pagespeed plugin for WordPress is vulnerable to unauthorized modification of datCheck if you run itEPSS 0.21%Nov 13, 2025
- High7.1The AI Engine plugin for WordPress is vulnerable to PHP Object Injection via PHAR Deserialization in all versions up to, and including, 3.1.8 via deserialization of untrusted inputCheck if you run itEPSS 0.45%Nov 13, 2025
- Medium5.3The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajax_get_coCheck if you run itEPSS 0.31%Nov 13, 2025
- Medium4.9The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, anCheck if you run itEPSS 0.32%Nov 13, 2025
- Medium5.3The Survey Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ays_survey_show_results' AJAX endpoint in all versionsCheck if you run itEPSS 0.26%Nov 13, 2025
- Medium5.3The SureForms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.1 via the '_srfm_email_notification' post meta registrCheck if you run itEPSS 0.85%Nov 13, 2025
- High8.8The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation.Check if you run itEPSS 0.35%Nov 13, 2025
- Medium5.3The Survey Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivate_plugin_option() function in all versionCheck if you run itEPSS 0.24%Nov 13, 2025
- High8.8The Import any XML, CSV or Excel File to WordPress (WP All Import) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6.Check if you run itEPSS 0.68%Nov 13, 2025
- Medium5.3The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'usces_export' action in all versions up to, and iCheck if you run itEPSS 0.26%Nov 13, 2025
- Medium4.3The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.5 via tCheck if you run itEPSS 0.26%Nov 13, 2025
- Medium6.5The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cleanCache() function in all veCheck if you run itEPSS 0.66%Nov 13, 2025
- Critical9.3An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system.Check if you run itEPSS 0.85%Nov 13, 2025
Sort