Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 dueCheck if you run itEPSS 0.23%Nov 4, 2025
- Medium6.1The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0.Check if you run itEPSS 0.12%Nov 4, 2025
- Critical9.8The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the suc_submit_capabilities() function in all versionsCheck if you run itEPSS 0.45%Nov 4, 2025
- High7.2The Footnotes Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.0.7 due to insufficient inputCheck if you run itEPSS 0.29%Nov 4, 2025
- Medium4.3The Import Export For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_setting() function in allCheck if you run itEPSS 0.20%Nov 4, 2025
- Medium4.4The Nari Accountant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via account settings in all versions up to, and including, 1.0.12 due to insufficient input saCheck if you run itEPSS 0.19%Nov 4, 2025
- Medium4.4The WP Carticon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carticon_js_script' parameter in all versions up to, and including, 1.0.0 due to insufficCheck if you run itEPSS 0.21%Nov 4, 2025
- High7.5The Elegance Menu plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the 'elegance-menu' attribute of the shortcode.Check if you run itEPSS 0.59%Nov 4, 2025
- Medium6.1The MapMap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.1The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium4.3The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilityCheck if you run itEPSS 0.19%Nov 4, 2025
- High8.8The EM Beer Manager plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in all versions up to, and including, 3.2.3.Check if you run itEPSS 0.64%Nov 4, 2025
- Medium6.1The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.1The LMB^Box Smileys plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.4The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 4.7.Check if you run itEPSS 0.24%Nov 4, 2025
- Medium5.3The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_reset_capability' AJAXCheck if you run itEPSS 0.29%Nov 4, 2025
- High7.5The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.30%Nov 4, 2025
- Medium6.1The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1.Check if you run itEPSS 0.16%Nov 4, 2025
- Medium6.5The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization check in all versions up to, and including, 2.0.3.Check if you run itEPSS 0.27%Nov 4, 2025
- Medium5.4The Social Media WPCF7 Stop Words plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.3.Check if you run itEPSS 0.13%Nov 4, 2025
- Medium4.4The Free Quotation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.1.6 due to insufficient input sanitiCheck if you run itEPSS 0.19%Nov 4, 2025
- Medium5.3The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wp_ajax_nopriv_dominokit_option_admin_action AJAX endpoint in all vCheck if you run itEPSS 0.24%Nov 4, 2025
- Medium6.1The Pagerank Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in all versions up to, and including, 1.1.5.Check if you run itEPSS 0.15%Nov 4, 2025
- High8.8Multiple plugins for WordPress with the Jewel Theme Recommended Plugins Library are vulnerable to Unrestricted Upload of File with Dangerous Type via arbitrary plugin installationCheck if you run itEPSS 0.66%Nov 4, 2025
- Medium6.1The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.Check if you run itEPSS 0.15%Nov 4, 2025
Sort