Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue afCheck if you run itEPSS 0.17%Oct 27, 2025
- Medium5.4Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a througCheck if you run itEPSS 0.22%Oct 27, 2025
- Medium4.3Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aCheck if you run itEPSS 0.20%Oct 27, 2025
- Medium5.3Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.22%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Estatik estatik allows DOM-Based XSS.This issue affects Estatik: fromCheck if you run itEPSS 0.20%Oct 27, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio CloudSearch cloud-search allows Stored XSS.This issue affects CloudSearch: from n/a through <= 3.0.0.Check if you run itEPSS 0.14%Oct 27, 2025
- Critical9.1Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Remote Code Inclusion.This issue affectsCheck if you run itEPSS 0.46%Oct 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issueCheck if you run itEPSS 0.14%Oct 27, 2025
- Medium4.3Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WelcartCheck if you run itEPSS 0.24%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icc0rz H5P h5p allows Stored XSS.This issue affects H5P: from n/a through <= 1Check if you run itEPSS 0.20%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allowCheck if you run itEPSS 0.20%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Konstantin Pankratov Date counter date-counter allows Stored XSS.This issue afCheck if you run itEPSS 0.20%Oct 27, 2025
- Medium6.5Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio CCheck if you run itEPSS 0.33%Oct 27, 2025
- Medium5.4Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.ThCheck if you run itEPSS 0.27%Oct 27, 2025
- Medium6.5Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affecCheck if you run itEPSS 0.33%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Debuggers Studio Marquee Addons for Elementor marquee-addons-for-elementor allCheck if you run itEPSS 0.20%Oct 27, 2025
- Medium5.3Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ExportCheck if you run itEPSS 0.29%Oct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Bulk Auto Image Title Attribute bulk-image-title-attribute allows DOM-BaCheck if you run itEPSS 0.20%Oct 27, 2025
- Medium5.4Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS DeCheck if you run itEPSS 0.28%Oct 27, 2025
- Medium5.4Missing Authorization vulnerability in ignitionwp IgnitionDeck ignitiondeck allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IgnitionDeck:Check if you run itEPSS 0.28%Oct 27, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryOct 27, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryOct 27, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme WP VR wpvr allows DOM-Based XSS.This issue affects WP VR: from n/a thCheck if you run itEPSS 0.21%Oct 27, 2025
- Medium4.3Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectCheck if you run itEPSS 0.25%Oct 27, 2025
- Unknown** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Check if you run itEPSS 1.00%Oct 27, 2025
Sort