Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versionCheck if you run itEPSS 0.25%Oct 4, 2025
- Medium6.1The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameterCheck if you run itEPSS 0.27%Oct 4, 2025
- Medium4.3The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to missing authorization via the wdkit_handlCheck if you run itEPSS 0.21%Oct 4, 2025
- Critical9.8The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12.Check if you run itEPSS 0.60%Oct 4, 2025
- Medium5.4The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_label' and 'after_label' parameters in versions less than, or equaCheck if you run itEPSS 0.20%Oct 4, 2025
- Medium5.3The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in aCheck if you run itEPSS 0.29%Oct 4, 2025
- High8.1The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the get_cc_orders and update_order_status fuCheck if you run itEPSS 0.31%Oct 4, 2025
- Medium6.5The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.27%Oct 4, 2025
- Medium5.4The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and outpuCheck if you run itEPSS 0.21%Oct 4, 2025
- Medium6.5The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetFoCheck if you run itEPSS 0.28%Oct 4, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityPatch nowKEVEPSS 99.73%Oct 4, 2025
- Low3.5HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited.Check if you run itEPSS 0.19%Oct 3, 2025
- High8.5An unquoted search path or element vulnerability has been reported to affect NetBak Replicator.Check if you run itEPSS 0.21%Oct 3, 2025
- Medium4.6HCL MyXalytics v6.6 is affected by an HTML Injection.Check if you run itEPSS 0.18%Oct 3, 2025
- Medium5.1A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.47%Oct 3, 2025
- Medium5.1A command injection vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 1.33%Oct 3, 2025
- High7.1OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafteCheck if you run itEPSS 0.68%Oct 3, 2025
- Critical9.4The module will parse a node which is not a child of a structural node.Check if you run itEPSS 0.22%Oct 3, 2025
- Critical9.4When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoSCheck if you run itEPSS 0.22%Oct 3, 2025
- Critical10.0Redis redis Use After FreePatch nowKEVEPSS 82.64%Oct 3, 2025
- Medium5.9Use of Hard-coded Credentials vulnerability in Logo Software Inc.Check if you run itEPSS 0.15%Oct 3, 2025
- High7.3In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local pCheck if you run itEPSS 0.33%Oct 3, 2025
- Medium4.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Isin Basi Advertisement Information Technologies Trade Inc.Check if you run itEPSS 0.21%Oct 3, 2025
- Medium4.3The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium4.3The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2.Check if you run itEPSS 0.13%Oct 3, 2025
Sort