Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The GenerateBlocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_option_rest' function in all versions up to, andCheck if you run itEPSS 0.29%Oct 25, 2025
- Medium6.4The Open Source Genesis Framework theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.6.0 due to insCheck if you run itEPSS 0.19%Oct 25, 2025
- Medium6.4The Gutenberg Blocks – PublishPress Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Marker Title' and 'Marker Description' parameters for the MapsCheck if you run itEPSS 0.23%Oct 25, 2025
- Low3.7The Password Protected plugin for WordPress is vulnerable to authorization bypass via IP address spoofing in all versions up to, and including, 2.7.11.Check if you run itEPSS 0.31%Oct 25, 2025
- Medium6.4The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions less than, or equal to, 11.6.2 due to iCheck if you run itEPSS 0.25%Oct 25, 2025
- Medium5.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhoCheck if you run itEPSS 0.29%Oct 25, 2025
- Medium6.4The Listeo theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in version less than, or equal to, 2.0.8 due to insufficient input sanitizatiCheck if you run itEPSS 0.19%Oct 25, 2025
- Medium4.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3.Check if you run itEPSS 0.22%Oct 25, 2025
- High7.2The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTTP Referer header in versions less than, or equal to, 3.4.4 due to insufficient input saniCheck if you run itEPSS 0.26%Oct 25, 2025
- Medium5.3The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions upCheck if you run itEPSS 0.29%Oct 25, 2025
- Medium6.4The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_eCheck if you run itEPSS 0.22%Oct 25, 2025
- Medium5.3The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and incluCheck if you run itEPSS 0.31%Oct 25, 2025
- High7.0Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity.Check if you run itEPSS 0.13%Oct 24, 2025
- High7.0Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules.Check if you run itEPSS 0.21%Oct 24, 2025
- High7.0Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and useCheck if you run itEPSS 0.15%Oct 24, 2025
- High8.9An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and versionCheck if you run itEPSS 0.32%Oct 24, 2025
- High8.6GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference (IDOR) vulnerability via the API.Check if you run itEPSS 0.42%Oct 24, 2025
- Critical9.8D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.Check if you run itEPSS 0.41%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery.Check if you run itEPSS 0.46%Oct 24, 2025
- High7.5Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft SoftCheck if you run itEPSS 0.34%Oct 24, 2025
- Medium6.2An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain sensitive information via the plaintext storage of passwords and usernames.Check if you run itEPSS 0.14%Oct 24, 2025
- Critical9.8Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability.Check if you run itEPSS 0.84%Oct 24, 2025
Sort