Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The Alobaidi Captcha plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.3 due to insufficient inputCheck if you run itEPSS 0.26%Aug 15, 2025
- Critical9.8The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the delete_files() function inCheck if you run itEPSS 0.70%Aug 15, 2025
- Medium6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.16%Aug 15, 2025
- High7.5The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.Check if you run itEPSS 0.55%Aug 15, 2025
- High7.5The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.0.53 via the 'bizcalv' shortcode.Check if you run itEPSS 0.80%Aug 15, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Bank Management System up to 1.0.Check if you run itEPSS 0.52%Aug 15, 2025
- Medium6.9A vulnerability was determined in SourceCodester Online Bank Management System up to 1.0.Check if you run itEPSS 0.52%Aug 15, 2025
- Low2.0A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4.Check if you run itEPSS 0.16%Aug 15, 2025
- Medium6.4The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wptb shortcode in all versions up to, and includingCheck if you run itEPSS 0.33%Aug 15, 2025
- Critical9.8The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4.Check if you run itEPSS 0.81%Aug 15, 2025
- Medium6.4The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘data-gallery-items’Check if you run itEPSS 0.25%Aug 15, 2025
- Low3.8The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function.Check if you run itEPSS 0.28%Aug 15, 2025
- High7.3A vulnerability has been found in Mechrevo Control Center GX V2 5.56.51.48.Check if you run itEPSS 0.17%Aug 15, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Low3.7HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.Check if you run itEPSS 0.15%Aug 15, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- High8.7A vulnerability has been found in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.77%Aug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 15, 2025
Sort