Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Reflected XSS.ThisCheck if you run itEPSS 0.26%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Booking Calendar Contact Form booking-calendar-contact-form allowsCheck if you run itEPSS 0.23%Jul 4, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awordpresslife Neom Blog neom-blog allows Reflected XSS.This issue affects NeoCheck if you run itEPSS 0.26%Jul 4, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmoreira Team Showcase team-showcase-cm allows DOM-Based XSS.This issue affectCheck if you run itEPSS 0.26%Jul 4, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path TraCheck if you run itEPSS 0.48%Jul 4, 2025
- Critical10.0Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson Easy Stripe easy-stripe allows Remote Code Inclusion.This issue affects Easy Stripe: fromCheck if you run itEPSS 0.43%Jul 4, 2025
- Critical9.8inspirythemes realhomes Incorrect Privilege AssignmentPatch nowKEVEPSS 0.38%Jul 4, 2025
- High7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows SQL InjeCheck if you run itEPSS 0.28%Jul 4, 2025
- Medium6.5Missing Authorization vulnerability in vgwort VG WORT METIS vgw-metis allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VG WORT METIS: fromCheck if you run itEPSS 0.25%Jul 4, 2025
- Medium6.5Missing Authorization vulnerability in Paytiko - Payment Orchestration Platform Paytiko for WooCommerce paytiko allows Exploiting Incorrectly Configured Access Control Security LevCheck if you run itEPSS 0.25%Jul 4, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thanhtungtnt Video List Manager video-list-manager allows Stored XSS.This issuCheck if you run itEPSS 0.21%Jul 4, 2025
- High7.2Improper Control of Generation of Code ('Code Injection') vulnerability in Beplusthemes Alone alone allows Remote Code Inclusion.This issue affects Alone: from n/a through <= 7.8.2Check if you run itEPSS 0.23%Jul 4, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearcCheck if you run itEPSS 0.21%Jul 4, 2025
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Red Art redart allows Object Injection.This issue affects Red Art: from n/a through <= 3.8.Check if you run itEPSS 0.41%Jul 4, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File InclusiCheck if you run itEPSS 0.67%Jul 4, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-cCheck if you run itEPSS 0.58%Jul 4, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in BestWpDeveloper WooCommerce Product Multi-Action Woo-product-multiaction allows Object Injection.This issue affects WooCommerce PCheck if you run itEPSS 0.44%Jul 4, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in Fastw3b LLC FW Gallery fw-gallery allows Using Malicious Files.This issue affects FW Gallery: from n/a through <= 8Check if you run itEPSS 0.40%Jul 4, 2025
- Medium6.5Missing Authorization vulnerability in Gnuget MF Plus WPML mf-plus-wpml allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MF Plus WPML: froCheck if you run itEPSS 0.28%Jul 4, 2025
- High7.2Server-Side Request Forgery (SSRF) vulnerability in TeconceTheme Allmart allmart-core allows Server Side Request Forgery.This issue affects Allmart: from n/a through <= 1.0.0.Check if you run itEPSS 0.22%Jul 4, 2025
- Low2.1A vulnerability was found in Monitorr up to 1.7.6m.Check if you run itEPSS 0.52%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binderfs 16 --timeout 300' under KASANCheck if you run itEPSS 0.17%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: binder: fix yet another UAF in binder_devices Commit e77aff5528a18 ("binderfs: fix use-after-free in binder_deviCheck if you run itEPSS 0.17%Jul 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices crash in tb_cfg_request_dequeue()Check if you run itEPSS 0.27%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Card flip image slideshow card-flip-image-slideshow allows DOM-BasedCheck if you run itEPSS 0.19%Jul 4, 2025
Sort