Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typewriter and Countdown widgets in all versions up to, and includCheck if you run itEPSS 0.25%Aug 29, 2025
- Medium5.9Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote authenticated users with administrator prCheck if you run itEPSS 0.27%Aug 29, 2025
- Medium5.3Uncaught exception issue exists in Multiple products in bizhub series.Check if you run itEPSS 0.12%Aug 29, 2025
- Medium6.5The iATS Online Forms plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order' parameter in all versions up to, and including, 1.2 due to insufficient escapinCheck if you run itEPSS 0.32%Aug 29, 2025
- Medium6.4The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map Block URL in all versions up to, and including, 1.3.0 due toCheck if you run itEPSS 0.25%Aug 29, 2025
- Medium6.4The List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.0.6 due to insufficient inputCheck if you run itEPSS 0.25%Aug 29, 2025
- Medium4.3The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Aug 29, 2025
- Medium4.3The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on the lwscache_activatePlugin() function in all versions up to,Check if you run itEPSS 0.26%Aug 29, 2025
- Medium5.5A vulnerability was determined in code-projects Online Event Judging System 1.0.Check if you run itEPSS 0.43%Aug 29, 2025
- Low2.1A vulnerability was found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.40%Aug 29, 2025
- High8.6Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability.Check if you run itEPSS 1.26%Aug 29, 2025
- High7.1Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability.Check if you run itEPSS 0.30%Aug 29, 2025
- Medium6.9A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019.Check if you run itEPSS 0.39%Aug 29, 2025
- High8.7The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary sCheck if you run itEPSS 0.60%Aug 29, 2025
- High8.7Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.Check if you run itEPSS 0.44%Aug 29, 2025
- Critical9.3Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embeddedCheck if you run itEPSS 0.53%Aug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- None0.0Rejected reason: Not usedOpen the advisoryAug 29, 2025
- Critical9.3TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.Check if you run itEPSS 0.52%Aug 29, 2025
Sort