Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-gateway-for-saferpay allows Path Traversal.This issue affectCheck if you run itEPSS 0.41%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Boiardt Easy Flash Embed easy-flash-embed allows Stored XSS.This issueCheck if you run itEPSS 0.17%Sep 5, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder WordPress Assistant assistant allows Reflected XSS.This issue aCheck if you run itEPSS 0.19%Sep 5, 2025
- Critical9.8Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through <= 4.0.Check if you run itEPSS 0.44%Sep 5, 2025
- Medium6.5Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.TCheck if you run itEPSS 0.23%Sep 5, 2025
- Medium5.5In App Widget, there is a possible Information Disclosure due to a confused deputy.Check if you run itEPSS 0.07%Sep 5, 2025
- Medium5.5In gralloc4, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.08%Sep 5, 2025
- Low3.3In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the coCheck if you run itEPSS 0.08%Sep 5, 2025
- Medium5.5In libxml2, there is a possible out of bounds read due to a buffer overflow.Check if you run itEPSS 0.08%Sep 5, 2025
- Medium5.5In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check.Check if you run itEPSS 0.07%Sep 5, 2025
- Medium5.3A vulnerability was detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.38%Sep 5, 2025
- Medium5.3A security vulnerability has been detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.38%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in givecloud Donation Forms WP by Givecloud donation-forms-by-givecl…Check if you run itEPSS 0.21%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Course Finder | andré martin - it solutions & research UG Course Booking PlatfCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tan Nguyen Instant Locations instant-locations allows Stored XSS.This issue afCheck if you run itEPSS 0.18%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ivan Drago vipdrv vipdrv-vip-test-drive allows Stored XSS.This issue affects vCheck if you run itEPSS 0.18%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Harris Search Cloud One search-cloud-one allows Stored XSS.This issue aCheck if you run itEPSS 0.18%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affCheck if you run itEPSS 0.17%Sep 5, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.ThisCheck if you run itEPSS 0.27%Sep 5, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in usamafarooq Woocommerce Gifts Product woo-gift-product allows Cross Site Request Forgery.This issue affects Woocommerce Gifts ProCheck if you run itEPSS 0.15%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ali Aghdam Aparat Video Shortcode aparat-shortcode allows Stored XSS.This issuCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sudar Muthu WP Github Gist wp-github-gist allows Stored XSS.This issue affectsCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in josepsitjar StoryMap wp-storymap allows DOM-Based XSS.This issue affects StoryCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pusheco Pushe Web Push Notification pushe-webpush allows Stored XSS.This issueCheck if you run itEPSS 0.18%Sep 5, 2025
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.ThCheck if you run itEPSS 0.29%Sep 5, 2025
Sort