Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion: from nCheck if you run itEPSS 0.32%Sep 22, 2025
- Medium6.5Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a throCheck if you run itEPSS 0.32%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timur Kamaev Kama Click Counter kama-clic-counter allows Stored XSS.This issueCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Quotes:Check if you run itEPSS 0.28%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luke Mlsna Last Updated Shortcode last-updated-shortcode allows Stored XSS.ThiCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects LCheck if you run itEPSS 0.21%Sep 22, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quadlayers Perfect Brands for WooCommerce perfect-woocommerce-brands allows SQCheck if you run itEPSS 0.27%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in cecabank Cecabank WooCommerce Plugin cecabank-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.27%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in WP CMS Ninja Current Age Plugin current-age allows Stored XSS.This issue affects Current Age Plugin: from n/a through <= 1.6.Check if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Casengo Casengo Live Chat Support the-casengo-chat-widget allows Stored XSS.This issue affects Casengo Live Chat Support: from n/Check if you run itEPSS 0.13%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tapfiliate Tapfiliate tapfiliate allows Stored XSS.This issue affects TapfiliaCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Russell Jamieson Genesis Club Lite genesis-club-lite allows Stored XSS.This isCheck if you run itEPSS 0.21%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ptibogxiv Doliconnect doliconnect allows Stored XSS.This issue affects Doliconnect: from n/a through <= 9.5.7.Check if you run itEPSS 0.13%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebWizards MarketKing marketking-multivendor-marketplace-for-woocommerce allowCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skyword Skyword API Plugin skyword-plugin allows Stored XSS.This issue affectsCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows Stored XSS.Check if you run itEPSS 0.21%Sep 22, 2025
- High7.5Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.26%Sep 22, 2025
- Medium5.5BunnyPad is a note taking software.Check if you run itEPSS 0.17%Sep 22, 2025
- Medium6.9A security vulnerability has been detected in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.56%Sep 22, 2025
- Medium6.9A weakness has been identified in Campcodes Farm Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium5.3A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.39%Sep 22, 2025
- Medium5.3A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.39%Sep 22, 2025
- Medium4.8Stored cross-site scripting (XSS) vulnerability in the notifications widget in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 througCheck if you run itEPSS 0.22%Sep 22, 2025
- Medium6.5CubeCart is an ecommerce software solution.Check if you run itEPSS 0.40%Sep 22, 2025
- Medium5.4CubeCart is an ecommerce software solution.Check if you run itEPSS 0.29%Sep 22, 2025
Sort