Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in PHPGurukul Zoo Management System 2.1.Check if you run itEPSS 0.56%May 16, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical.Check if you run itEPSS 0.53%May 16, 2025
- Low3.5The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform CroCheck if you run itEPSS 0.33%May 15, 2025
- Low3.5The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Check if you run itEPSS 0.33%May 15, 2025
- Low3.5The Advanced Cron Manager WordPress plugin before 2.5.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrCheck if you run itEPSS 0.33%May 15, 2025
- Low3.5The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin tCheck if you run itEPSS 0.36%May 15, 2025
- Low3.5The Smart Post Show WordPress plugin before 2.4.28 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Save as Image Plugin by Pdfcrowd WordPress plugin before 3.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perforCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Easy Property Listings WordPress plugin before 3.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.6.8 does not sanitise and escape some of its settingsCheck if you run itEPSS 0.36%May 15, 2025
- Medium4.8The Ultimate Noindex Nofollow Tool II WordPress plugin before 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfoCheck if you run itEPSS 0.33%May 15, 2025
- High8.8The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing unauthenticated userCheck if you run itEPSS 0.71%May 15, 2025
- High7.1The Advanced Schedule Posts WordPress plugin through 2.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site ScriptiCheck if you run itEPSS 0.32%May 15, 2025
- Low3.5The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them viaCheck if you run itEPSS 0.20%May 15, 2025
- Medium6.1The illi Link Party! WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site ScriptingCheck if you run itEPSS 0.39%May 15, 2025
- Medium5.5The illi Link Party! WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them viCheck if you run itEPSS 0.18%May 15, 2025
- High7.1The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to makCheck if you run itEPSS 0.17%May 15, 2025
- Medium4.3The Ultimate Noindex Nofollow Tool WordPress plugin through 1.1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admiCheck if you run itEPSS 0.21%May 15, 2025
- Medium4.3The WP-Reply Notify WordPress plugin through 1.1 does not have a CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them vCheck if you run itEPSS 0.21%May 15, 2025
- High7.1The aBitGone CommentSafe WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to makCheck if you run itEPSS 0.19%May 15, 2025
- Medium4.8The Better Follow Button for Jetpack WordPress plugin through 8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to performCheck if you run itEPSS 0.31%May 15, 2025
- Medium4.8The WolfNet IDX for WordPress plugin through 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Check if you run itEPSS 0.37%May 15, 2025
- High7.3The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place when importing settings from the v1, which could allow attackersCheck if you run itEPSS 0.25%May 15, 2025
- Medium4.8The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a ReflecCheck if you run itEPSS 0.39%May 15, 2025
- Medium4.8The Advanced Page Visit Counter WordPress plugin before 8.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoCheck if you run itEPSS 0.39%May 15, 2025
Sort