Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes (parsed to inject instance_id) + unde…Check if you run itEPSS 0.21%Oct 16, 2026
- Medium5.4The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removi…Check if you run itEPSS 0.29%Oct 16, 2026
- Low2.7The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'email_address' parameter.Check if you run itEPSS 0.32%Oct 16, 2026
- Medium6.4The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in a…Check if you run itEPSS 0.26%Oct 16, 2026
- Medium6.5The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5.Check if you run itEPSS 0.35%Oct 16, 2026
- High7.2The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g.Check if you run itEPSS 0.36%Oct 16, 2026
- Medium6.8The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to th…Check if you run itEPSS 0.46%Oct 16, 2026
- High7.2The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in…Check if you run itEPSS 0.30%Oct 16, 2026
- Medium5.3The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4…Check if you run itEPSS 0.35%Oct 16, 2026
- Medium4.8The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The…Check if you run itEPSS 0.31%Oct 16, 2026
- Critical9.8The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…Check if you run itEPSS 0.51%Oct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- UnknownMalicious code in @flexmr/survey-conversation (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @flexmr/survey-client (npm)Open the advisoryOct 16, 2026
- High7.8A flaw was found in cifs-utils.Check if you run itEPSS 0.15%Oct 16, 2026
- High7.2The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site S…Check if you run itEPSS 0.25%Oct 16, 2026
- High7.2The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site S…Check if you run itEPSS 0.28%Oct 16, 2026
- Medium6.5The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter.Check if you run itEPSS 0.58%Oct 16, 2026
- High7.2The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in ver…Check if you run itEPSS 0.19%Oct 16, 2026
- Medium6.1The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirect_url' parameter in versions…Check if you run itEPSS 0.19%Oct 16, 2026