Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function.Patch nowKEVEPSS 0.79%Oct 14, 2026
- High7.2The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, and including, 2.…Check if you run itEPSS 0.31%Oct 14, 2026
- High7.5The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up to, and includ…Check if you run itEPSS 0.42%Oct 14, 2026
- High7.2The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and includin…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium6.4The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute in all versions up to,…Check if you run itEPSS 0.21%Oct 14, 2026
- High7.5Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.Check if you run itEPSS 0.25%Oct 14, 2026
- Critical9.8The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter.Check if you run itEPSS 1.03%Oct 14, 2026
- Medium4.7The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.4The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field i…Check if you run itEPSS 0.25%Oct 14, 2026
- High7.2The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including,…Check if you run itEPSS 0.31%Oct 14, 2026
- UnknownCVE-2019-25777 is listed by USN-8925-1: YAML-LibYAML vulnerabilities.Check if you run itEPSS 0.34%Oct 14, 2026
- UnknownCVE-2017-20285 is listed by USN-8925-1: YAML-LibYAML vulnerabilities.Check if you run itEPSS 0.32%Oct 14, 2026
- HighCVE-2026-98431: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependencyCheck if you run itEPSS 0.20%Oct 14, 2026
- MediumCVE-2026-98430: RDMA/efa: Keep admin queues alive while IRQ is registeredCheck if you run itEPSS 0.21%Oct 14, 2026
- MediumCVE-2026-98429: RDMA/efa: Keep EQ resources alive while IRQ is registeredCheck if you run itEPSS 0.21%Oct 14, 2026
- MediumCVE-2026-98428: ALSA: usb: 6fire: Avoid embedded URBsCheck if you run itEPSS 0.21%Oct 14, 2026
- MediumCVE-2026-98427: net/sched: codel: bound the dropping loop per dequeue callCheck if you run itEPSS 0.20%Oct 14, 2026
- MediumCVE-2026-98426: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error pathCheck if you run itEPSS 0.22%Oct 14, 2026
- Highwifi: mac80211: don't warn when an IBSS has no channel to scanCheck if you run itEPSS 0.21%Oct 14, 2026
- MediumCVE-2026-98424: wifi: cfg80211: undo netns switch if renaming the wiphy failsCheck if you run itEPSS 0.21%Oct 14, 2026
- MediumCVE-2026-98423: wifi: mac80211_hwsim: don't hand frames to mac80211 while stoppingCheck if you run itEPSS 0.21%Oct 14, 2026
- HighCVE-2026-98422: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdownCheck if you run itEPSS 0.22%Oct 14, 2026
- HighCVE-2026-98421: wifi: mac80211: require a peer station for TDLS setup confirmCheck if you run itEPSS 0.21%Oct 14, 2026
- MediumCVE-2026-98420: ksmbd: follow SMB2 session expiration semanticsCheck if you run itEPSS 0.24%Oct 14, 2026
- HighCVE-2026-98419: drop_monitor: fix out-of-bounds write in reset_per_cpu_data()Check if you run itEPSS 0.22%Oct 14, 2026
Sort