Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1.Check if you run itEPSS 0.23%Apr 19, 2025
- High8.7A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644).Check if you run itEPSS 1.02%Apr 19, 2025
- High8.7A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644).Check if you run itEPSS 1.09%Apr 19, 2025
- Medium4.8A vulnerability was found in songquanpeng one-api up to 0.6.10.Check if you run itEPSS 0.34%Apr 19, 2025
- Medium6.9A vulnerability has been found in WCMS 11 and classified as critical.Check if you run itEPSS 0.65%Apr 19, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in WCMS 11.Check if you run itEPSS 0.52%Apr 19, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in WCMS 11.Check if you run itEPSS 0.46%Apr 19, 2025
- Medium6.4The SB Chart block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.2.6 due to insufficient iCheck if you run itEPSS 0.33%Apr 19, 2025
- High8.8The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the savePackage function in all versions up to, and iCheck if you run itEPSS 1.16%Apr 19, 2025
- Critical9.8The Wordpress Plugin Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0Check if you run itEPSS 0.81%Apr 19, 2025
- Medium5.1A vulnerability classified as critical was found in SeaCMS up to 13.3.Check if you run itEPSS 0.53%Apr 19, 2025
- High7.5The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophiCheck if you run itEPSS 0.50%Apr 19, 2025
- High7.2The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up to, and including, 2.3.4 due to insufficieCheck if you run itEPSS 0.29%Apr 19, 2025
- High7.5The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1.Check if you run itEPSS 0.24%Apr 19, 2025
- High7.5The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vulnerable to arbitrary file read due to insufficient file patCheck if you run itEPSS 0.40%Apr 19, 2025
- Medium6.4The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider widget in all versions up to, and including, 2.2.5 due toCheck if you run itEPSS 0.32%Apr 19, 2025
- Medium6.4The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Wrapper LinCheck if you run itEPSS 0.33%Apr 19, 2025
- Critical9.8The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7Check if you run itEPSS 1.02%Apr 19, 2025
- High7.5The JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injection via the 'jobwp_upload_resume' parameter in all versions uCheck if you run itEPSS 1.90%Apr 19, 2025
- Medium4.3The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,Check if you run itEPSS 0.15%Apr 19, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.57%Apr 19, 2025
- Medium6.4SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name ofCheck if you run itEPSS 0.10%Apr 19, 2025
- High8.2In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product.Check if you run itEPSS 0.16%Apr 19, 2025
- Low2.9mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114.Check if you run itEPSS 0.16%Apr 19, 2025
- Low2.9cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.Check if you run itEPSS 0.23%Apr 19, 2025
Sort