Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program plugin for WordPress is vulnerable to Missing Authorization in versions up to, and includCheck if you run itEPSS 0.27%Dec 13, 2025
- Medium5.4The Popup Builder (Easy Notify Lite) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the easynotify_cp_reset() functionCheck if you run itEPSS 0.25%Dec 13, 2025
- Medium6.4The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data’ parameter in all versions up to, and including, 4.5.8 due to insufficient inputCheck if you run itEPSS 0.30%Dec 13, 2025
- Critical9.8The Export WP Page to Static HTML & PDF plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.4 through publicly exposed coCheck if you run itEPSS 2.09%Dec 13, 2025
- Medium4.3The Popover Windows plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.Check if you run itEPSS 0.12%Dec 13, 2025
- Medium5.3The Devs CRM – Manage tasks, attendance and teams all together plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/dCheck if you run itEPSS 0.29%Dec 13, 2025
- Medium6.4The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the script adder present in posts in allCheck if you run itEPSS 0.22%Dec 13, 2025
- Medium5.3The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1.Check if you run itEPSS 0.27%Dec 13, 2025
- Medium6.1The WP to LinkedIn Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.9.8 due to insufficientCheck if you run itEPSS 0.25%Dec 13, 2025
- Critical9.8The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01.Check if you run itEPSS 0.75%Dec 13, 2025
- Medium5.3The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14.Check if you run itEPSS 0.45%Dec 13, 2025
- Medium4.3The Mavix Education theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mavix_education_activate_plugin' AJAX action inCheck if you run itEPSS 0.19%Dec 13, 2025
- Medium5.4The The Shortcode Ajax plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.Check if you run itEPSS 0.29%Dec 13, 2025
- Medium6.5The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv RCheck if you run itEPSS 0.25%Dec 13, 2025
- Medium6.4The YITH WooCommerce Quick View plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yith_quick_view shortcode in all versions up to, and including, 2Check if you run itEPSS 0.29%Dec 13, 2025
- Medium6.4The Kingcabs theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘progressbarLayout’ parameter in all versions up to, and including, 1.1.9 due to insufficientCheck if you run itEPSS 0.22%Dec 13, 2025
- Medium5.3The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.Check if you run itEPSS 0.26%Dec 13, 2025
- Medium5.3The Devs CRM – Manage tasks, attendance and teams all together plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wpCheck if you run itEPSS 0.27%Dec 13, 2025
- Medium6.1The Social Media Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage parameter in all versions up to, and including, 3.6.5 due to insuCheck if you run itEPSS 0.25%Dec 13, 2025
- Low3.7The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to missing authorization in the handle_rest_pre_dispatch() funCheck if you run itEPSS 0.32%Dec 13, 2025
- Medium4.7The Solutions Ad Manager plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.30%Dec 13, 2025
- High7.5The افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'columns' parameter in all versionCheck if you run itEPSS 0.45%Dec 13, 2025
- Medium4.3The Gallery Blocks with Lightbox.Check if you run itEPSS 0.22%Dec 13, 2025
- Medium6.4The Custom Frames plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter of the 'customframe' shortcode in all versions up to, and including, 1Check if you run itEPSS 0.22%Dec 13, 2025
- High8.8The Doubly – Cross Domain Copy Paste for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.46 via deserialization of unCheck if you run itEPSS 0.55%Dec 13, 2025
Sort