Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access ControlCheck if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in FAPI Business s.r.o.Check if you run itEPSS 0.29%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control SecuritCheck if you run itEPSS 0.27%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Views CounteCheck if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a througCheck if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured Access Control SecurCheck if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectCheck if you run itEPSS 0.27%Dec 16, 2025
- Medium5.3Insertion of Sensitive Information Into Sent Data vulnerability in wowpress.host Fix Media Library wow-media-library-fix allows Retrieve Embedded Sensitive Data.This issue affectsCheck if you run itEPSS 0.29%Dec 16, 2025
- Medium5.3Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate AuctCheck if you run itEPSS 0.29%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leaky Paywall:Check if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StyliCheck if you run itEPSS 0.38%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGroCheck if you run itEPSS 0.32%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: fromCheck if you run itEPSS 0.26%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.32%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FeCheck if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through <= 7.13.2.Check if you run itEPSS 0.25%Dec 16, 2025
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Norebro Extra norebro-extra allows Code Injection.This issue affects NorebroCheck if you run itEPSS 0.28%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.25%Dec 16, 2025
- Medium4.9Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.34%Dec 16, 2025
- Medium4.9Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issCheck if you run itEPSS 0.34%Dec 16, 2025
- Medium4.9Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-check allows Path Traversal.This issue affects Health Check & Troubleshooting: fromCheck if you run itEPSS 0.47%Dec 16, 2025
- Medium4.9Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.28%Dec 16, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist allows Phishing.This issue affects Directorist: from n/a through <= 8.6.6.Check if you run itEPSS 0.24%Dec 16, 2025
- Medium4.3Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PrCheck if you run itEPSS 0.33%Dec 16, 2025
Sort