Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in web-able BetPress betpress allows Stored XSS.This issue affects BetPress: from n/a through <= 1.0.1 Lite.Check if you run itEPSS 0.12%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in nonletter Newsletter subscription optin module newsletter-subscription-widget-for-sendblaster allows Stored XSS.This issue affectCheck if you run itEPSS 0.12%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao SEO For Images seo-for-images allows Stored XSS.This issue affects SEO For Images: from n/a through <= 1.0.0.Check if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate ParCheck if you run itEPSS 0.12%Aug 28, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vikingjs Goal Tracker for Patreon goal-tracker-for-patreon allows Stored XSS.TCheck if you run itEPSS 0.22%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin gn-xml-sitemap allows Stored XSS.This issue affects Google XML News Sitemap plugin: frCheck if you run itEPSS 0.12%Aug 28, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View link-view allows Stored XSS.This issue affects Link View: frCheck if you run itEPSS 0.21%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through <= 0.9.1.Check if you run itEPSS 0.13%Aug 28, 2025
- Critical9.1Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code Inclusion.This issue affCheck if you run itEPSS 0.37%Aug 28, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue affects WooBeWCheck if you run itEPSS 0.30%Aug 28, 2025
- Medium6.5The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capabiliCheck if you run itEPSS 0.37%Aug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality.Check if you run itEPSS 0.25%Aug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality.Check if you run itEPSS 0.19%Aug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality.Check if you run itEPSS 0.19%Aug 28, 2025
- Medium6.9QuickCMS sends password and login via GET Request.Check if you run itEPSS 0.14%Aug 28, 2025
- Medium6.9QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality.Check if you run itEPSS 0.15%Aug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality.Check if you run itEPSS 0.25%Aug 28, 2025
- High7.3Local privilege escalation due to improper soft link handling.Check if you run itEPSS 0.14%Aug 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simCheck if you run itEPSS 0.34%Aug 28, 2025
- High8.7Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to view arbitrary filesCheck if you run itEPSS 0.40%Aug 28, 2025
- High8.7Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).Check if you run itEPSS 0.62%Aug 28, 2025
- High7.1Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).Check if you run itEPSS 0.47%Aug 28, 2025
- Critical9.3SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.Check if you run itEPSS 0.53%Aug 28, 2025
- Critical9.3SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.Check if you run itEPSS 0.53%Aug 28, 2025
- High7.3Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a cCheck if you run itEPSS 0.12%Aug 28, 2025
Sort