Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Images custom-post-types-image allows Code Injection.This issue affects Custom Post Type Images: from nCheck if you run itEPSS 0.17%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in scriptsbundle Nokri nokri allows Cross Site Request Forgery.This issue affects Nokri: from n/a through <= 1.6.4.Check if you run itEPSS 0.14%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in PressPage Entertainment Inc Mavis HTTPS to HTTP Redirection mavis-https-to-http-redirect allows Stored XSS.This issue affects MavCheck if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in WPDirectoryKit Sweet Energy Efficiency sweet-energy-efficiency allows Stored XSS.This issue affects Sweet Energy Efficiency: fromCheck if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in WPMK WPMK PDF Generator wpmk-pdf-generator allows Stored XSS.This issue affects WPMK PDF Generator: from n/a through <= 1.0.1.Check if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Aftabul Islam Stock Message stock-message allows Stored XSS.This issue affects Stock Message: from n/a through <= 1.1.0.Check if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in NIX Solutions Ltd NIX Anti-Spam Light nix-anti-spam-light allows Cross Site Request Forgery.This issue affects NIX Anti-Spam LighCheck if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in EdwardBock Grid grid allows Stored XSS.This issue affects Grid: from n/a through <= 2.3.1.Check if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Shankaranand Maurya WP Content Protection wp-content-protection allows Stored XSS.This issue affects WP Content Protection: fromCheck if you run itEPSS 0.13%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in tryinteract Interact: Embed A Quiz On Your Site interact-quiz-embed allows Cross Site Request Forgery.This issue affects InteractCheck if you run itEPSS 0.14%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in extendyourweb HORIZONTAL SLIDER horizontal-slider allows Stored XSS.This issue affects HORIZONTAL SLIDER: from n/a through <= 2.4Check if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in puravida1976 ShrinkTheWeb (STW) Website Previews shrinktheweb-website-preview-plugin allows Stored XSS.This issue affects ShrinkTCheck if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in WP CMS Ninja Current Age Plugin current-age allows Stored XSS.This issue affects Current Age Plugin: from n/a through <= 1.6.Check if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Casengo Casengo Live Chat Support the-casengo-chat-widget allows Stored XSS.This issue affects Casengo Live Chat Support: from n/Check if you run itEPSS 0.13%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ptibogxiv Doliconnect doliconnect allows Stored XSS.This issue affects Doliconnect: from n/a through <= 9.5.7.Check if you run itEPSS 0.13%Sep 22, 2025
- Medium6.5CubeCart is an ecommerce software solution.Check if you run itEPSS 0.40%Sep 22, 2025
- Medium5.4IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.19%Sep 22, 2025
- High8.7A vulnerability has been found in Tenda AC23 up to 16.03.07.52.Check if you run itEPSS 0.82%Sep 22, 2025
- Medium5.3A vulnerability was found in MuYuCMS up to 2.7.Check if you run itEPSS 0.33%Sep 22, 2025
- Medium5.6The Etsy Shop WordPress plugin before 3.0.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-SitCheck if you run itEPSS 0.20%Sep 22, 2025
- Medium5.8Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane paCheck if you run itEPSS 0.27%Sep 22, 2025
- Medium6.8The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability.Check if you run itEPSS 0.33%Sep 22, 2025
- Medium6.5The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability.Check if you run itEPSS 0.37%Sep 22, 2025
- Medium5.4A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.26%Sep 22, 2025
- Critical9.8A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.48%Sep 22, 2025
Sort