Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Admin in English with Switch plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.1.7.Check if you run itEPSS 0.13%Sep 11, 2025
- Medium4.3The Run Log plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.10.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Plugin updates blocker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Sep 11, 2025
- High8.1The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, and including, 5.1.4.Check if you run itEPSS 0.70%Sep 11, 2025
- Medium4.3The The integration of the AMO.CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.4.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Zoho Flow plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.14.1.Check if you run itEPSS 0.19%Sep 11, 2025
- Unknownopsview opsview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.11%Sep 11, 2025
- High7.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.36%Sep 10, 2025
- Medium5.3chancms chancms Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Sep 10, 2025
- High7.8Hoverfly is an open source API simulation tool.Check if you run itEPSS 0.71%Sep 10, 2025
- High7.1Stalwart is a mail and collaboration server.Check if you run itEPSS 0.35%Sep 10, 2025
- High8.8The upload endpoint insufficiently validates the 'Upload-Key' request header.Check if you run itEPSS 0.71%Sep 10, 2025
- Medium4.3The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6.Check if you run itEPSS 0.17%Sep 10, 2025
- Medium4.3The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6.Check if you run itEPSS 0.17%Sep 10, 2025
- Medium6.4The Auto Save Remote Images (Drafts) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.9 via the fetch_images() function.Check if you run itEPSS 0.20%Sep 10, 2025
- High7.8The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests (IRP_MJ_READ/IRP_MJ_WRITE) sent to its devicCheck if you run itEPSS 0.13%Sep 10, 2025
- Critical9.1Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.82%Sep 9, 2025
- Medium5.3Saleor is an e-commerce platform.Check if you run itEPSS 0.31%Sep 9, 2025
- High8.6listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 0.14%Sep 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Cross Site Request Forgery.This issue affects Advanced Settings: from n/aCheck if you run itEPSS 0.12%Sep 9, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Rhys Wynne WP eBay Product Feeds ebay-feeds-for-wordpress allows Server Side Request Forgery.This issue affects WP eBay ProductCheck if you run itEPSS 0.15%Sep 9, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS.Check if you run itEPSS 0.11%Sep 9, 2025
Sort