Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.1Check if you run itEPSS 0.19%Oct 24, 2025
- High7.5The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupaCheck if you run itEPSS 0.33%Oct 24, 2025
- High8.8The IndieAuth plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4.Check if you run itEPSS 0.21%Oct 24, 2025
- Medium6.5The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2.Check if you run itEPSS 0.30%Oct 24, 2025
- Medium6.4The Time Clock – A WordPress Employee & Volunteer Time Clock Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and iCheck if you run itEPSS 0.24%Oct 24, 2025
- Medium4.3The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and includCheck if you run itEPSS 0.20%Oct 24, 2025
- Medium6.3The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifCheck if you run itEPSS 0.27%Oct 24, 2025
- Medium4.3The Disable Content Editor For Specific Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.Check if you run itEPSS 0.13%Oct 24, 2025
- Medium6.1The Multi Item Responsive Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.21%Oct 24, 2025
- Medium4.4The qnotsquiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qnotsquiz_custom_start_text' parameter in all versions up to, and including, 1.0.0 due to iCheck if you run itEPSS 0.21%Oct 24, 2025
- Medium6.8The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vulnerability.Check if you run itEPSS 0.30%Oct 24, 2025
- Medium5.5The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo iCheck if you run itEPSS 0.19%Oct 24, 2025
- Low2.7The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFICheck if you run itEPSS 0.31%Oct 24, 2025
- Medium4.8Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in user's webCheck if you run itEPSS 0.18%Oct 24, 2025
- Medium5.1Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's web browseCheck if you run itEPSS 0.20%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Oct 24, 2025
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.34%Oct 24, 2025
Sort