Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Geopost plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' parameter of the 'geopost' shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.23%Nov 11, 2025
- Medium6.5The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.6.1 via the via arbitrary method call from Authors_LCheck if you run itEPSS 0.41%Nov 11, 2025
- Medium6.4The Skip to Timestamp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'skipto' shortcode in all versions up to, and including, 1.4.4.Check if you run itEPSS 0.29%Nov 11, 2025
- Medium6.4The Nonaki – Drag and Drop Email Template builder and Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nonaki' shortcode in all versions up to,Check if you run itEPSS 0.23%Nov 11, 2025
- Medium4.3The CTL Arcade Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.15%Nov 11, 2025
- Medium5.4The Progress Bar Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insuCheck if you run itEPSS 0.18%Nov 11, 2025
- Medium5.5The RandomQuotr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.4 due to insufficient input sanitizatCheck if you run itEPSS 0.21%Nov 11, 2025
- Medium4.4The Fleet Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.5.1 due to insufficient input sanitizCheck if you run itEPSS 0.23%Nov 11, 2025
- Medium5.3The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fui_delete_image() and fui_delete_all_images() functCheck if you run itEPSS 0.38%Nov 11, 2025
- Medium5.3The Crypto plugin for WordPress is vulnerable to unauthorized manipulation of data in all versions up to, and including, 2.22.Check if you run itEPSS 0.36%Nov 11, 2025
- Medium6.4The My Geo Posts Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mygeo_city' shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.24%Nov 11, 2025
- Medium6.4The Ungapped Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'prefillvalues' parameter in the ungapped-form shortcode in all versions up to, and iCheck if you run itEPSS 0.19%Nov 11, 2025
- Medium6.4The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the [five9-chat] shortcode in all versions up to, and includingCheck if you run itEPSS 0.24%Nov 11, 2025
- Medium5.4The Slippy Slider – Responsive Touch Navigation Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slippy-slider' shortcode in all versionsCheck if you run itEPSS 0.21%Nov 11, 2025
- Medium6.4The WP BBCode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' shortcode in all versions up to, and including, 1.8.1 due to insufficient inpCheck if you run itEPSS 0.24%Nov 11, 2025
- High8.8The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5.Check if you run itEPSS 0.34%Nov 11, 2025
- Medium5.3The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files.Check if you run itEPSS 0.33%Nov 11, 2025
- Medium6.4The WP Bootstrap Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bootstrap_tab' shortcode in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.29%Nov 11, 2025
- Medium5.3The Shelf Planner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints in all versions up to, andCheck if you run itEPSS 0.29%Nov 11, 2025
- Medium5.1In TEE EcDSA algorithm, there is a possible memory consistency issue.Check if you run itEPSS 0.14%Nov 11, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryNov 11, 2025
- High7.5SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network.Check if you run itEPSS 0.45%Nov 11, 2025
- Medium6.1SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the atCheck if you run itEPSS 0.22%Nov 11, 2025
- Medium5.3Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs.Check if you run itEPSS 0.50%Nov 11, 2025
- Medium4.3SAP S4CORE (Manage journal entries) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges.Check if you run itEPSS 0.26%Nov 11, 2025
Sort