Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verge3D: from n/a thCheck if you run itEPSS 0.34%Jun 6, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WCVendors WC Vendors Marketplace wc-vendors allows Blind SQL Injection.This isCheck if you run itEPSS 0.42%Jun 6, 2025
- High7.6Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shaonsina Sina Extension for Elementor sina-extension-for-elementor allows StoCheck if you run itEPSS 0.28%Jun 6, 2025
- Medium4.3Improper Control of Generation of Code ('Code Injection') vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/aCheck if you run itEPSS 0.34%Jun 6, 2025
- Medium4.3Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team ShowcCheck if you run itEPSS 0.28%Jun 6, 2025
- Medium4.3Missing Authorization vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affecCheck if you run itEPSS 0.28%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vova Shortcodes Ultimate shortcodes-ultimate allows Stored XSS.This issue affeCheck if you run itEPSS 0.26%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sevenspark ShiftNav – Responsive Mobile Menu shiftnav-responsive-mobile-menu aCheck if you run itEPSS 0.26%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sevenspark Bellows Accordion Menu bellows-accordion-menu allows Stored XSS.ThiCheck if you run itEPSS 0.26%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in bobbingwide oik oik allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects oik: from n/a through <= 4.15.Check if you run itEPSS 0.34%Jun 6, 2025
- Medium4.3Missing Authorization vulnerability in nK DocsPress docspress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DocsPress: from n/a throughCheck if you run itEPSS 0.30%Jun 6, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This iCheck if you run itEPSS 0.15%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request Forgery.This issue affects Everest Backup: from n/a throughCheck if you run itEPSS 0.16%Jun 6, 2025
- High7.4Cross-Site Request Forgery (CSRF) vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects POEditor: from n/a through <= 0.9.10.Check if you run itEPSS 0.19%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Raychat: from n/a through <= 2.1.0Check if you run itEPSS 0.32%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Stored XSS.This issue affectsCheck if you run itEPSS 0.26%Jun 6, 2025
- Medium5.1A vulnerability was found in code-projects Laundry System 1.0.Check if you run itEPSS 0.32%Jun 6, 2025
- Medium5.1A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic.Check if you run itEPSS 0.32%Jun 6, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Mr.Check if you run itEPSS 0.46%Jun 6, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through < 1.1.13.Check if you run itEPSS 0.48%Jun 6, 2025
- Medium5.1A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical.Check if you run itEPSS 4.79%Jun 6, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.41%Jun 6, 2025
- High8.3Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.25%Jun 6, 2025
- Medium4.8Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.37%Jun 6, 2025
- Medium5.1In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS).Check if you run itEPSS 0.36%Jun 6, 2025
Sort