Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missinCheck if you run itEPSS 0.90%Sep 17, 2025
- Medium6.4The Media Player Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtitle_ssize', 'track_title', and 'track_artist_name' parametersCheck if you run itEPSS 0.25%Sep 17, 2025
- Medium6.5The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up toCheck if you run itEPSS 0.61%Sep 17, 2025
- High7.8A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to executeCheck if you run itEPSS 0.17%Sep 17, 2025
- High7.8A Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary codeCheck if you run itEPSS 0.17%Sep 17, 2025
- High7.8An Out-Of-Bounds Read vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitraryCheck if you run itEPSS 0.17%Sep 17, 2025
- High8.8The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.28.Check if you run itEPSS 0.75%Sep 17, 2025
- High8.1The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the upload_functioCheck if you run itEPSS 0.63%Sep 17, 2025
- Medium5.9The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insufficient escaping on the user suCheck if you run itEPSS 0.94%Sep 17, 2025
- High8.4RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path.Check if you run itEPSS 0.18%Sep 17, 2025
- Medium6.4The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'row' shortcode in all versions up to, and including, 1.4 due to insufCheck if you run itEPSS 0.28%Sep 17, 2025
- Medium5.4The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.13%Sep 17, 2025
- High8.7The N-Reporter, N-Cloud, and N-Probe developed by N-Partner has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and eCheck if you run itEPSS 0.95%Sep 17, 2025
- High8.6Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE.Check if you run itEPSS 1.12%Sep 17, 2025
- Medium6.9Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE.Check if you run itEPSS 0.33%Sep 17, 2025
- Medium6.7A vulnerability (CWE-428) has been identified in the Uninterruptible Power Supply (UPS) management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable fiCheck if you run itEPSS 0.15%Sep 17, 2025
- Medium5.1A vulnerability was identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.29%Sep 17, 2025
- Medium5.1Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to VCheck if you run itEPSS 0.33%Sep 17, 2025
- Medium4.3The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.20%Sep 17, 2025
- Medium4.3The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0.Check if you run itEPSS 0.17%Sep 17, 2025
- Medium6.6The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.5 via the enabled_loggers parameter.Check if you run itEPSS 1.01%Sep 17, 2025
- Medium6.4The Appointmind plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'appointmind_calendar' shortcode in all versions up to, and including, 4.1.0 dueCheck if you run itEPSS 0.20%Sep 17, 2025
- High7.5The Catch Dark Mode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0 via the 'catch_dark_mode' shortcode.Check if you run itEPSS 1.03%Sep 17, 2025
- Medium6.4The Productive Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_productive_breadcrumb shortcode in all versions up to, and includingCheck if you run itEPSS 0.24%Sep 17, 2025
- Medium6.4The Social Media Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'twitter' shortcode in all versions up to, and including, 1.3.1 due tCheck if you run itEPSS 0.24%Sep 17, 2025
Sort