Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-galleryCheck if you run itEPSS 0.29%Jul 4, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.TCheck if you run itEPSS 0.29%Jul 4, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issueCheck if you run itEPSS 0.29%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aakif Kadiwala Posts Slider Shortcode posts-slider-shortcode allows DOM-BasedCheck if you run itEPSS 0.19%Jul 4, 2025
- Medium5.3Missing Authorization vulnerability in amazewp fluXtore fluxtore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects fluXtore: from n/a throuCheck if you run itEPSS 0.25%Jul 4, 2025
- Medium5.3Missing Authorization vulnerability in kamleshyadav CF7 7 Mailchimp Add-on CF7-mailchimp-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.25%Jul 4, 2025
- Medium4.3Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LMSACE ConnecCheck if you run itEPSS 0.22%Jul 4, 2025
- Medium4.3Missing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.22%Jul 4, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CWD Web Designer Easy Elements Hider easy-elements-hider allows Stored XSS.ThiCheck if you run itEPSS 0.20%Jul 4, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cybio Gallery Widget gallery-widget allows SQL Injection.This issue affects GaCheck if you run itEPSS 0.29%Jul 4, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Truman Contact Us page - Contact people LITE contact-us-page-contact-peoCheck if you run itEPSS 0.29%Jul 4, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a throCheck if you run itEPSS 0.19%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OwnerRez OwnerRez API ownerrez allows Stored XSS.This issue affects OwnerRez ACheck if you run itEPSS 0.19%Jul 4, 2025
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects BulkCheck if you run itEPSS 0.38%Jul 4, 2025
- Medium4.6Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Code Injection.This isCheck if you run itEPSS 0.21%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Video Gallery Block video-gallery-block allows Stored XSS.This issueCheck if you run itEPSS 0.19%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam WP fancybox wp-fancybox allows Stored XSS.This issue affects WP fancCheck if you run itEPSS 0.19%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A.Check if you run itEPSS 0.19%Jul 4, 2025
- Medium5.3Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through <= 4.11.2.Check if you run itEPSS 0.26%Jul 4, 2025
- Medium5.3Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.Check if you run itEPSS 0.26%Jul 4, 2025
- High7.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chatra Chatra Live Chat + ChatBot + Cart Saver allows Stored XSS.Check if you run itEPSS 0.44%Jul 4, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Brian S.Check if you run itEPSS 0.15%Jul 4, 2025
- Medium6.5A flaw was found in the key export functionality of libssh.Check if you run itEPSS 0.61%Jul 4, 2025
- Medium5.0A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation.Check if you run itEPSS 0.50%Jul 4, 2025
- Medium6.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-url' DOM element attribute in all versions up to, andCheck if you run itEPSS 0.20%Jul 4, 2025
Sort