Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHasThemes download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.75%May 4, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- Medium6.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHo…Check if you run itEPSS 0.42%May 2, 2026
- Medium5.4The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,…Check if you run itEPSS 0.24%Apr 23, 2026
- Medium4.3The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1.Check if you run itEPSS 0.37%Apr 21, 2026
- Medium5.3The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to Unauthenticated Open Email Relay in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.44%Apr 21, 2026
- Medium6.4The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up to, and i…Check if you run itEPSS 0.43%Apr 18, 2026
- Medium6.4The GreenShift - Animation and Page Builder Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 12.8.9 This is d…Check if you run itEPSS 0.35%Apr 11, 2026
- Medium6.4The Page Builder: Pagelayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget's Custom Attributes field in all versions up to, an…Check if you run itEPSS 0.34%Apr 8, 2026
- Medium6.4The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings[js]' parameter in v…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium6.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in all ve…Check if you run itEPSS 0.34%Apr 8, 2026
- Critical9.8@delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder.Check if you run itEPSS 0.61%Apr 7, 2026
- Medium4.3The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3.Check if you run itEPSS 0.29%Apr 4, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows…Check if you run itEPSS 0.22%Apr 1, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue…Check if you run itEPSS 0.22%Mar 31, 2026
- Medium5.3The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences ('CRLF Injection') in all v…Check if you run itEPSS 0.30%Mar 28, 2026
- Medium5.3The Punnel – Landing Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.1.Check if you run itEPSS 0.51%Mar 21, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 12.8.3.Check if you run itEPSS 0.32%Mar 7, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 vi…Check if you run itEPSS 0.37%Mar 6, 2026
- Medium6.4The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post meta value and the block attribute in…Check if you run itEPSS 0.34%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Co…Check if you run itEPSS 0.31%Mar 5, 2026
- High8.8The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function.Check if you run itEPSS 0.92%Mar 3, 2026
- Medium6.4The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘logoTag’ Site Identity block attribute i…Check if you run itEPSS 0.17%Feb 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Business Template Blocks for WPBakery (Visual Composer)…Check if you run itEPSS 0.19%Feb 20, 2026