Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The VM Menu Reorder plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.13%Sep 27, 2025
- Medium4.3The Professional Contact Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.13%Sep 27, 2025
- Medium4.3The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0.Check if you run itEPSS 0.13%Sep 27, 2025
- Medium6.1The Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incluCheck if you run itEPSS 0.12%Sep 27, 2025
- Medium4.3The Sync Feedly plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.13%Sep 27, 2025
- Medium4.3The HidePost plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.8.Check if you run itEPSS 0.13%Sep 27, 2025
- Medium5.3A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.25%Sep 27, 2025
- Medium4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0.Check if you run itEPSS 0.16%Sep 27, 2025
- Medium4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0.Check if you run itEPSS 0.16%Sep 27, 2025
- Medium6.5IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmittedCheck if you run itEPSS 0.17%Sep 27, 2025
- High8.6Flag Forge is a Capture The Flag (CTF) platform.Check if you run itEPSS 0.37%Sep 27, 2025
- High8.2Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL.Check if you run itEPSS 0.16%Sep 26, 2025
- Medium6.9A security flaw has been discovered in Tencent WeKnora 0.1.0.Check if you run itEPSS 0.47%Sep 26, 2025
- Medium6.9A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60.Check if you run itEPSS 0.39%Sep 26, 2025
- Medium5.3A weakness has been identified in givanz Vvveb up to 1.0.7.2.Check if you run itEPSS 0.28%Sep 26, 2025
- Low3.5An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated useCheck if you run itEPSS 0.34%Sep 26, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader:Check if you run itEPSS 0.17%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Ashwani kumar GST for WooCommerce gst-for-woocommerce allows Stored XSS.This issue affects GST for WooCommerce: from n/a throughCheck if you run itEPSS 0.12%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in flytedesk Flytedesk Digital flytedesk-digital allows Stored XSS.This issue affects Flytedesk Digital: from n/a through <= 2018110Check if you run itEPSS 0.12%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in yourplugins Conditional Cart Messages for WooCommerce – YourPlugins.com yourplugins-wc-conditional-cart-notices allows Stored XSSCheck if you run itEPSS 0.12%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Taraprasad Swain HTACCESS IP Blocker htaccess-ip-blocker allows Stored XSS.This issue affects HTACCESS IP Blocker: from n/a throuCheck if you run itEPSS 0.12%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in W3S Cloud Technology W3SCloud Contact Form 7 to Zoho CRM w3s-cf7-zoho allows Stored XSS.This issue affects W3SCloud Contact FormCheck if you run itEPSS 0.12%Sep 26, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in NewsMAN NewsmanApp newsmanapp allows Stored XSS.This issue affects NewsmanApp: from n/a through <= 2.7.7.Check if you run itEPSS 0.14%Sep 26, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in bdthemes ZoloBlocks zoloblocks allows Server Side Request Forgery.This issue affects ZoloBlocks: from n/a through <= 2.3.11.Check if you run itEPSS 0.21%Sep 26, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: fromCheck if you run itEPSS 0.17%Sep 26, 2025
Sort