Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgetsCheck if you run itEPSS 0.22%Apr 26, 2025
- High8.1The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' paCheck if you run itEPSS 0.77%Apr 26, 2025
- High8.8The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget.Check if you run itEPSS 0.79%Apr 26, 2025
- High7.3The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, aCheck if you run itEPSS 0.54%Apr 26, 2025
- Low2.9python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as in addition to through .Check if you run itEPSS 0.22%Apr 26, 2025
- Medium4.9CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain cases of different-oriCheck if you run itEPSS 0.25%Apr 26, 2025
- Medium4.9CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaCheck if you run itEPSS 0.26%Apr 26, 2025
- Low3.1Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented asCheck if you run itEPSS 0.44%Apr 26, 2025
- Medium6.1In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability.Check if you run itEPSS 0.32%Apr 26, 2025
- Medium4.5In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding.Check if you run itEPSS 0.18%Apr 26, 2025
- Medium6.4An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ inCheck if you run itEPSS 1.59%Apr 26, 2025
- High7.3z2d is a pure Zig 2D graphics library.Check if you run itEPSS 0.18%Apr 25, 2025
- Medium6.5HCL SX v21 is affected by usage of a weak cryptographic algorithm.Check if you run itEPSS 0.23%Apr 25, 2025
- Medium5.1An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.Check if you run itEPSS 0.14%Apr 25, 2025
- Medium5.1A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user.Check if you run itEPSS 0.19%Apr 25, 2025
- Medium5.1An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user.Check if you run itEPSS 0.15%Apr 25, 2025
- Medium5.5Halo is an open source website building tool.Check if you run itEPSS 0.83%Apr 25, 2025
- High7.6Dify is an open-source LLM app development platform.Check if you run itEPSS 0.34%Apr 25, 2025
- Medium5.3A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.Check if you run itEPSS 0.32%Apr 25, 2025
- High7.5A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—viCheck if you run itEPSS 0.52%Apr 25, 2025
- Medium4.3A flaw was discovered in Moodle.Check if you run itEPSS 0.32%Apr 25, 2025
- Medium4.3A flaw was found in Moodle.Check if you run itEPSS 0.37%Apr 25, 2025
- Medium4.3A flaw was found in Moodle.Check if you run itEPSS 0.33%Apr 25, 2025
- Medium5.4A flaw was found in Moodle.Check if you run itEPSS 0.34%Apr 25, 2025
- High8.8A flaw was found in Moodle.Check if you run itEPSS 1.06%Apr 25, 2025
Sort