Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery alCheck if you run itEPSS 0.28%Jul 16, 2025
- Medium6.5Missing Authorization vulnerability in activity-log.com Profiler - What Slowing Down Your WP allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.24%Jul 16, 2025
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in Adrian Tobey Groundhogg groundhogg allows Upload a Web Shell to a Web Server.This issue affects Groundhogg: from n/Check if you run itEPSS 0.50%Jul 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefan M.Check if you run itEPSS 0.22%Jul 16, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQL Injection.This issuCheck if you run itEPSS 0.34%Jul 16, 2025
- Medium4.3Missing Authorization vulnerability in sminozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin real-estate-right-now allows Exploiting Incorrectly ConfigCheck if you run itEPSS 0.28%Jul 16, 2025
- Medium5.3Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Accessing Functionality Not Properly Constrained by ACLsCheck if you run itEPSS 0.31%Jul 16, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Atakan Au Import CDN-Remote Images import-cdn-remote-images allows Stored XSS.This issue affects Import CDN-Remote Images: from nCheck if you run itEPSS 0.14%Jul 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Parakoos Image Wall image-wall allows Stored XSS.This issue affects Image WallCheck if you run itEPSS 0.24%Jul 16, 2025
- Medium5.4Missing Authorization vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatboxCheck if you run itEPSS 0.26%Jul 16, 2025
- Medium5.3Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects StoCheck if you run itEPSS 0.31%Jul 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows Stored XSS.ThisCheck if you run itEPSS 0.24%Jul 16, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in Kerfred FG Drupal to WordPress fg-drupal-to-wp allows Server Side Request Forgery.This issue affects FG Drupal to WordPress: froCheck if you run itEPSS 0.23%Jul 16, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce SMTP for SendGrid – YaySMTP smtp-sendgrid allows SQL Injection.ThiCheck if you run itEPSS 0.42%Jul 16, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayExtra yayextra allows SQL Injection.This issue affects YayExtraCheck if you run itEPSS 0.42%Jul 16, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce SMTP for Amazon SES smtp-amazon-ses allows SQL Injection.This issuCheck if you run itEPSS 0.34%Jul 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuanticaLabs GymBase Theme Classes gymbase_classes allows SQL Injection.This iCheck if you run itEPSS 0.31%Jul 16, 2025
- Medium4.3Missing Authorization vulnerability in CreativeMindsSolutions CM Pop-Up banners cm-pop-up-banners allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.25%Jul 16, 2025
- Medium4.3Missing Authorization vulnerability in SMTP2GO SMTP2GO smtp2go allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMTP2GO: from n/a throughCheck if you run itEPSS 0.23%Jul 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue afCheck if you run itEPSS 0.24%Jul 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetPopup jet-popup allows Stored XSS.This issue affects JetPopup: fCheck if you run itEPSS 0.24%Jul 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetPopup jet-popup allows DOM-Based XSS.This issue affects JetPopupCheck if you run itEPSS 0.24%Jul 16, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 74.50%Jul 16, 2025
- Medium6.4The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via tCheck if you run itEPSS 0.35%Jul 16, 2025
- Medium4.3Certain instructions need intercepting and emulating by Xen.Check if you run itEPSS 0.70%Jul 16, 2025
Sort