Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The African Boss Get Cash get-cash allows Stored XSS.This issue affects Get CaCheck if you run itEPSS 0.21%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever WP Notification Bell wp-notification-bell allows Stored XSS.This issueCheck if you run itEPSS 0.23%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects CaCheck if you run itEPSS 0.22%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PriceListo Best Restaurant Menu by PriceListo best-restaurant-menu-by-pricelisCheck if you run itEPSS 0.21%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jimmywb Simple Link List Widget simple-link-list-widget allows Stored XSS.ThisCheck if you run itEPSS 0.22%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Nick Ciske To Lead For Salesforce salesforce-wordpress-to-lead allows Reflected XSS.This issue affects To Lead For Salesforce: frCheck if you run itEPSS 0.13%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored XSS.This iCheck if you run itEPSS 0.22%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in brijrajs WooCommerce Single Page Checkout woo-single-page-checkout allows Cross Site Request Forgery.This issue affects WooCommerCheck if you run itEPSS 0.14%Sep 5, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a through <= 4.3.8.Check if you run itEPSS 0.14%Sep 5, 2025
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mahmudul Hasan Arif Ninja Charts ninja-charts allows Retrieve Embedded Sensitive Data.ThCheck if you run itEPSS 0.31%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issCheck if you run itEPSS 0.21%Sep 5, 2025
- Medium4.3Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.This issue affects Payoneer Checkout: from n/a through <= 3.4.0Check if you run itEPSS 0.25%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue affects NotificationCheck if you run itEPSS 0.14%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Elementor Addons wpb-elementor-addons allows Stored XSS.This issueCheck if you run itEPSS 0.21%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arjan Olsder SEO Auto Linker wpa-seo-auto-linker allows Stored XSS.This issueCheck if you run itEPSS 0.22%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKube Kiwi kiwi-social-share allows Stored XSS.This issue affects Kiwi: fromCheck if you run itEPSS 0.21%Sep 5, 2025
- Medium4.3Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a throCheck if you run itEPSS 0.24%Sep 5, 2025
- Medium5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad NetGIS Server allows Reflected XSS.Check if you run itEPSS 0.22%Sep 5, 2025
- Low3.2Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrityCheck if you run itEPSS 0.15%Sep 5, 2025
- Critical9.8Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityPatch nowKEVEPSS 3.25%Sep 5, 2025
- Medium5.1Race condition vulnerability in the device standby module.Check if you run itEPSS 0.07%Sep 5, 2025
- High7.5Race condition vulnerability in the audio module.Check if you run itEPSS 0.07%Sep 5, 2025
- High8.4Out-of-bounds read vulnerability in the runtime interpreter module.Check if you run itEPSS 0.10%Sep 5, 2025
- Medium6.8Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.Check if you run itEPSS 0.09%Sep 5, 2025
- Medium4.7An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.Check if you run itEPSS 0.29%Sep 5, 2025
Sort