Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embedded Sensitive Data.This issue affects Blockspare: from n/aCheck if you run itEPSS 0.28%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8.Check if you run itEPSS 0.58%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan Pie Calendar pie-calendar.This issue affects Pie Calendar: fCheck if you run itEPSS 0.22%Oct 22, 2025
- Critical9.0s2member s2member Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.39%Oct 22, 2025
- High7.5Missing Authorization vulnerability in BuddyPress BuddyPress buddypress.This issue affects BuddyPress: from n/a through <= 14.3.4.Check if you run itEPSS 0.43%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak.This issue affects VOD InfomaCheck if you run itEPSS 0.25%Oct 22, 2025
- Medium6.5Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.This issue affects Recipe Card Blocks for Gutenberg & ElemenCheck if you run itEPSS 0.26%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a thCheck if you run itEPSS 0.52%Oct 22, 2025
- High8.8Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privilege Escalation.This issue affects Voice Feedback: from n/a through <= 1.0.3.Check if you run itEPSS 0.38%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weissmike Simple Finance Calculator simple-finance-calculator allows ReflectedCheck if you run itEPSS 0.24%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue affects Single Property: from n/a through <= 2.8.Check if you run itEPSS 0.53%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a thCheck if you run itEPSS 0.58%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Knowledge Base kbase allows Object Injection.This issue affects Knowledge Base: from n/a through <= 2.9.Check if you run itEPSS 0.53%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.Check if you run itEPSS 0.58%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects BugsPatrol: from n/a through <= 1.5.0.Check if you run itEPSS 0.59%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/aCheck if you run itEPSS 0.58%Oct 22, 2025
- High8.8Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships foCheck if you run itEPSS 0.39%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <=Check if you run itEPSS 0.58%Oct 22, 2025
- Critical9.8Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0.Check if you run itEPSS 0.45%Oct 22, 2025
- High7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ypromo PT Luxa Addons pt-luxa-addons allows Path Traversal.This issue affects PT LuxCheck if you run itEPSS 0.43%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8.Check if you run itEPSS 0.58%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Kriya kriya allows Object Injection.This issue affects Kriya: from n/a through <= 3.4.Check if you run itEPSS 0.53%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through < 1.3.0.Check if you run itEPSS 0.51%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13.Check if you run itEPSS 0.58%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.This issue affects VEDA: from n/a through <= 4.2.Check if you run itEPSS 0.53%Oct 22, 2025
Sort