Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field through the plugin's 'adinserter' shortcode in all verCheck if you run itEPSS 0.23%Nov 5, 2025
- Medium4.3The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inCheck if you run itEPSS 0.26%Nov 5, 2025
- Medium5.3The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9.Check if you run itEPSS 0.27%Nov 5, 2025
- Medium5.3The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up tCheck if you run itEPSS 0.37%Nov 5, 2025
- Medium6.4The Visual Link Preview plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's visual-link-preview shortcode in versions up to, and including, 2.2.7 dueCheck if you run itEPSS 0.24%Nov 5, 2025
- Medium6.4The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8Check if you run itEPSS 0.25%Nov 5, 2025
- Medium5.4An attacker with a valid read-only account can bypass Doris MCP Server’s read-only mode due to improper access control, allowing modifications that should have been prevented by reCheck if you run itEPSS 0.37%Nov 5, 2025
- Critical9.5The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is notCheck if you run itEPSS 0.83%Nov 5, 2025
- High8.0A flaw was found in Red Hat Satellite (Foreman component).Check if you run itEPSS 0.73%Nov 5, 2025
- Medium5.3The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5.Check if you run itEPSS 0.31%Nov 5, 2025
- Medium4.3The KiotViet Sync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveConfig() function in all versions up to, andCheck if you run itEPSS 0.20%Nov 5, 2025
- Critical9.8The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the create_media() function in all versions up to, and includiCheck if you run itEPSS 0.84%Nov 5, 2025
- Medium5.3The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the register_api_route() function in kiotvietCheck if you run itEPSS 0.27%Nov 5, 2025
- High8.6The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized access/modification/loss of data in all versions up to, and inclCheck if you run itEPSS 0.33%Nov 5, 2025
- Medium6.4The B Carousel Block – Responsive Image and Content Carousel plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.1.5.Check if you run itEPSS 0.23%Nov 5, 2025
- High7.5The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including,Check if you run itEPSS 2.49%Nov 5, 2025
- Medium4.3The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerCheck if you run itEPSS 0.25%Nov 5, 2025
- Medium6.4The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.11 via the wpematico_test_feed() functionCheck if you run itEPSS 0.24%Nov 5, 2025
- None0.0Not usedOpen the advisoryNov 5, 2025
- None0.0Not usedOpen the advisoryNov 5, 2025
- None0.0Not usedOpen the advisoryNov 5, 2025
- None0.0Not usedOpen the advisoryNov 5, 2025
- None0.0Not usedOpen the advisoryNov 5, 2025
- None0.0Not usedOpen the advisoryNov 5, 2025
- None0.0Not usedOpen the advisoryNov 5, 2025
Sort