Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppe_effect' shortcode in all versions up to, and including, 1.2.4 due to iCheck if you run itEPSS 0.30%Oct 3, 2025
- Medium6.1The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.16%Oct 3, 2025
- Medium6.4The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and belowCheck if you run itEPSS 0.31%Oct 3, 2025
- Medium6.4The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficiCheck if you run itEPSS 0.25%Oct 3, 2025
- Medium5.5The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2Check if you run itEPSS 0.22%Oct 3, 2025
- Critical9.8beardev joomsport Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.66%Oct 3, 2025
- Medium6.4The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticket_spot' shortcode in all versions up to, and including,Check if you run itEPSS 0.25%Oct 3, 2025
- Critical9.8The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all veCheck if you run itEPSS 0.47%Oct 3, 2025
- Medium6.5The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all versions up to, and including, 8.1 due to insufficient escaCheck if you run itEPSS 0.35%Oct 3, 2025
- Medium4.3The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium5.5The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitizatiCheck if you run itEPSS 0.22%Oct 3, 2025
- Medium6.4The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unify_checkout shortcode in all versions up to, and including, 3.4.7 dueCheck if you run itEPSS 0.31%Oct 3, 2025
- Critical9.1The WPRecovery plugin for WordPress is vulnerable to SQL Injection via the 'data[id]' parameter in all versions up to, and including, 2.0.Check if you run itEPSS 0.42%Oct 3, 2025
- Medium4.3The Comment Info Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5.Check if you run itEPSS 0.15%Oct 3, 2025
- Medium6.4The Easy Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in versions less than, or equal to, 2.2.9 due to insufficiCheck if you run itEPSS 0.35%Oct 3, 2025
- Medium5.3The SiteAlert (Formerly WP Health) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to,Check if you run itEPSS 0.38%Oct 3, 2025
- High7.5A flaw was found in QEMU.Check if you run itEPSS 0.86%Oct 3, 2025
- High8.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknolojik Center Telecommunication Industry Trade Co.Check if you run itEPSS 0.34%Oct 3, 2025
- Medium6.3Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 1.09%Oct 3, 2025
- Medium5.9Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.29%Oct 3, 2025
- High8.7Claude Code is an agentic coding tool.Check this weekEPSS 24.89%Oct 3, 2025
- None0.0Not usedOpen the advisoryOct 3, 2025
- Medium6.8Delta Electronics DIAScreen lacks proper validation of the user-supplied file.Check if you run itEPSS 0.19%Oct 3, 2025
- Medium6.8Delta Electronics DIAScreen lacks proper validation of the user-supplied file.Check if you run itEPSS 0.16%Oct 3, 2025
- Medium6.8Delta Electronics DIAScreen lacks proper validation of the user-supplied file.Check if you run itEPSS 0.16%Oct 3, 2025
Sort