Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely.Check if you run itEPSS 0.39%Jul 16, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businCheck if you run itEPSS 0.41%Jul 16, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FWDesign Easy Video Player Wordpress & WooCommerce fwdevp allows Path Traversal.ThisCheck if you run itEPSS 0.56%Jul 16, 2025
- High8.8Deserialization of Untrusted Data vulnerability in NooTheme Yogi yogi allows Object Injection.This issue affects Yogi: from n/a through < 2.9.3.Check if you run itEPSS 0.55%Jul 16, 2025
- High8.8Deserialization of Untrusted Data vulnerability in awethemes Hillter allows Object Injection.Check if you run itEPSS 0.55%Jul 16, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Object Injection.This issue affects URL Shortener: from n/a through <= 3.0.7Check if you run itEPSS 0.59%Jul 16, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows SQL Injection.This issueCheck if you run itEPSS 0.43%Jul 16, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThimPress WP Pipes allows SQL Injection.Check if you run itEPSS 0.48%Jul 16, 2025
- High8.6Missing Authorization vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects URL ShorteneCheck if you run itEPSS 0.37%Jul 16, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment Plugin for WooCommerce medical-prescription-attachment-plugin-for-woocommercCheck if you run itEPSS 0.62%Jul 16, 2025
- High7.5Missing Authorization vulnerability in August Infotech Multi-language Responsive Contact Form responsive-contact-form allows Accessing Functionality Not Properly Constrained by ACLCheck if you run itEPSS 0.43%Jul 16, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Guru Team Site Chat on Telegram site-chat-on-telegram allows Object Injection.This issue affects Site Chat on Telegram: from n/aCheck if you run itEPSS 0.59%Jul 16, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Torod Company for Information Technology Torod torod allows SQL Injection.ThisCheck if you run itEPSS 0.43%Jul 16, 2025
- Medium6.5Missing Authorization vulnerability in WPFactory Product XML Feed Manager for WooCommerce product-xml-feeds-for-woocommerce allows Exploiting Incorrectly Configured Access ControlCheck if you run itEPSS 0.36%Jul 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes ListingEasy listingeasy allows Reflected XSS.This issue affects ListCheck if you run itEPSS 0.28%Jul 16, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Codexpert, Inc CoSchool LMS coschool allows Object Injection.This issue affects CoSchool LMS: from n/a through <= 1.4.3.Check if you run itEPSS 0.59%Jul 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Ofiz - WordPress Business Consulting Theme ofiz allows ReflectedCheck if you run itEPSS 0.28%Jul 16, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg-cleverbakery allowCheck if you run itEPSS 0.56%Jul 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Invico - WordPress Consulting Business Theme invico allows ReflecCheck if you run itEPSS 0.28%Jul 16, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Visual Art | Gallery WordPress Theme visual-arts allows Object Injection.This issue affects Visual Art | Gallery WorCheck if you run itEPSS 0.54%Jul 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Reflected XSS.This isCheck if you run itEPSS 0.28%Jul 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPGYM allows SQL Injection.Check if you run itEPSS 0.40%Jul 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & AttributesCheck if you run itEPSS 0.39%Jul 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tablesCheck if you run itEPSS 0.28%Jul 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery alCheck if you run itEPSS 0.28%Jul 16, 2025
Sort