Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8The DL Yandex Metrika WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SCheck if you run itEPSS 0.31%May 15, 2025
- Medium4.8The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrCheck if you run itEPSS 0.36%May 15, 2025
- Critical9.8The Push Notification for Post and BuddyPress WordPress plugin before 1.9.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX actionCheck if you run itEPSS 2.79%May 15, 2025
- Medium5.4The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wCheck if you run itEPSS 0.32%May 15, 2025
- Medium4.8The CM Tooltip Glossary WordPress plugin before 4.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrosCheck if you run itEPSS 0.33%May 15, 2025
- Medium6.1The S3Player WordPress plugin through 4.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couldCheck if you run itEPSS 0.37%May 15, 2025
- Medium6.1The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which coulCheck if you run itEPSS 0.34%May 15, 2025
- Medium6.1The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site ScriptingCheck if you run itEPSS 0.37%May 15, 2025
- Medium4.8The Podlove Podcast Publisher WordPress plugin before 4.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoreCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Podlove Podcast Publisher WordPress plugin before 4.1.24 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StorCheck if you run itEPSS 0.33%May 15, 2025
- Medium6.1The MemberSpace WordPress plugin before 2.1.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couCheck if you run itEPSS 0.63%May 15, 2025
- Medium4.8The GDPR Framework By Data443 WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoreCheck if you run itEPSS 0.33%May 15, 2025
- Medium6.1The LifterLMS WordPress plugin before 8.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couldCheck if you run itEPSS 0.58%May 15, 2025
- Medium4.8The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to pCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiCheck if you run itEPSS 0.31%May 15, 2025
- Medium4.8The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.24 does not sanitise and escape some of its settings, which could allow high privilege users suchCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The HD Quiz WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site ScripCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoredCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Ditty WordPress plugin before 3.1.52 does not sanitise and escape some of its settings, which could allow high privilege users such as author to perform Stored Cross-Site ScripCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The AWeber WordPress plugin through 7.3.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site ScriCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SitCheck if you run itEPSS 0.36%May 15, 2025
- Medium4.8The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SitCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CrCheck if you run itEPSS 0.33%May 15, 2025
- Medium4.8The Top Comments WordPress plugin through 1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site SCheck if you run itEPSS 0.33%May 15, 2025
Sort