Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'set_organization_settings' action of the csso_hCheck if you run itEPSS 0.29%Sep 6, 2025
- Medium6.4The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘vodsChannel’ parameter in all versions up to, and including, 1.1.5 dueCheck if you run itEPSS 0.24%Sep 6, 2025
- Medium6.4The Smart Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.0.1 due to insufficient inpCheck if you run itEPSS 0.24%Sep 6, 2025
- Medium6.4The Content Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid and List widgets in all versions up to, and including, 4.1 due to insufficCheck if you run itEPSS 0.24%Sep 6, 2025
- High8.1Coder allows organizations to provision remote development environments via Terraform.Check if you run itEPSS 0.38%Sep 6, 2025
- Medium6.5The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via theCheck if you run itEPSS 0.34%Sep 6, 2025
- Medium6.4The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.2 due to iCheck if you run itEPSS 0.24%Sep 6, 2025
- Critical9.8The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9.Check if you run itEPSS 0.49%Sep 6, 2025
- High7.2The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the import functionality in all versions up to, and includiCheck if you run itEPSS 0.66%Sep 6, 2025
- Medium4.9The User Registration & Membership plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in version 4.3.0.Check if you run itEPSS 0.34%Sep 6, 2025
- Medium6.4The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets in all versions up to, and including,Check if you run itEPSS 0.24%Sep 6, 2025
- High7.8Roo Code is an AI-powered autonomous coding agent that lives in users' editors.Check if you run itEPSS 0.21%Sep 6, 2025
- Medium6.4The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the and parameters in all versions up to,Check if you run itEPSS 0.24%Sep 6, 2025
- Medium6.4The Html Social share buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zm_sh_btn' shortcode in all versions up to, and including, 2.1.16Check if you run itEPSS 0.24%Sep 6, 2025
- Medium5.3The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via thCheck if you run itEPSS 0.27%Sep 6, 2025
- High7.3The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including,Check if you run itEPSS 0.36%Sep 6, 2025
- High8.1ERP is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.33%Sep 6, 2025
- High7.9Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading toCheck if you run itEPSS 0.17%Sep 5, 2025
- Critical9.8ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.29%Sep 5, 2025
- Medium5.3fs2 is a compositional, streaming I/O library for Scala.Check if you run itEPSS 0.45%Sep 5, 2025
- Medium5.3A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24.Check if you run itEPSS 0.39%Sep 5, 2025
- Criticalinternetarchive Vulnerable to Directory Traversal in File.download()Check if you run itEPSS 1.59%Sep 5, 2025
- Medium6.5An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query.Check if you run itEPSS 0.32%Sep 5, 2025
- Medium6.5MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commitCheck if you run itEPSS 0.38%Sep 5, 2025
- Medium4.7Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.41%Sep 5, 2025
Sort