Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownRank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious CodeOpen the advisoryOct 16, 2026
- Medium4.3Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update HookCheck if you run itEPSS 0.21%Oct 16, 2026
- High7.2WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET ParameterCheck if you run itEPSS 0.24%Oct 15, 2026
- Medium5.4Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' ParameterCheck if you run itEPSS 0.22%Oct 15, 2026
- Medium6.4GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url AttributeCheck if you run itEPSS 0.22%Oct 15, 2026
- High7.2GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Email Log BodyCheck if you run itEPSS 0.19%Oct 15, 2026
- High8.8DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment EndpointCheck if you run itEPSS 0.52%Oct 15, 2026
- High7.2SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in CommentCheck if you run itEPSS 0.28%Oct 15, 2026
- Medium6.4Name Directory <= 1.34.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dir' Shortcode AttributeCheck if you run itEPSS 0.19%Oct 15, 2026
- Medium5.4The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5.Check if you run itEPSS 0.23%Oct 15, 2026
- High7.5Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' ParameterCheck if you run itEPSS 0.33%Oct 15, 2026
- Medium6.4Tutor LMS <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name ParameterCheck if you run itEPSS 0.20%Oct 15, 2026
- Medium6.4Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network SettingCheck if you run itEPSS 0.20%Oct 15, 2026
- High7.2User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer HeaderCheck if you run itEPSS 0.19%Oct 15, 2026
- High8.1Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing CredentialsCheck if you run itEPSS 0.50%Oct 15, 2026
40 records · page 2 of 2
PreviousNext