Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Wishlist wishlist allows Reflected XSS.This issue affects Wishlist: fCheck if you run itEPSS 0.28%Jun 9, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in themeton PIMP - Creative MultiPurpose allows Object Injection.Check if you run itEPSS 0.59%Jun 9, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection.Check if you run itEPSS 0.59%Jun 9, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Blind SQL Injection.ThCheck if you run itEPSS 0.43%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows ReflCheck if you run itEPSS 0.28%Jun 9, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-audio11-html5-shoutcast_history allows Path Traversal.This iCheck if you run itEPSS 0.54%Jun 9, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in themeton PressGrid - Frontend Publish Reaction & Multimedia Theme allows Object Injection.Check if you run itEPSS 0.59%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Spare allows Reflected XSS.Check if you run itEPSS 0.28%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal_video_player allows Reflected XSCheck if you run itEPSS 0.28%Jun 9, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Guppy wp-guppy allows SQL Injection.This issue affects WP Guppy:Check if you run itEPSS 0.40%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows Reflected XSS.This issueCheck if you run itEPSS 0.28%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit WordPress FlatNews Theme flatnews allows Reflected XSS.This issue affecCheck if you run itEPSS 0.28%Jun 9, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO Affiliates Pro: fromCheck if you run itEPSS 0.52%Jun 9, 2025
- High7.6Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team BuCheck if you run itEPSS 0.34%Jun 9, 2025
- High8.1Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core seofy-core allows PHP Local File Inclusion.This issue affectCheck if you run itEPSS 0.65%Jun 9, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Krowd krowd allows PHP Local File Inclusion.This issCheck if you run itEPSS 0.78%Jun 9, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Revo revo allows PHP Local File Inclusion.This isCheck if you run itEPSS 0.68%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs WP Email Delivery wp-email-delivery allows Reflected XSS.This issue aCheck if you run itEPSS 0.28%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows ReflectedCheck if you run itEPSS 0.28%Jun 9, 2025
- High7.1Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control SecuritCheck if you run itEPSS 0.36%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allowCheck if you run itEPSS 0.28%Jun 9, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affectsCheck if you run itEPSS 0.54%Jun 9, 2025
- High8.8Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects MapSVG: from n/a through < 8.6.13.Check if you run itEPSS 0.34%Jun 9, 2025
- High7.1Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IcegramCheck if you run itEPSS 0.34%Jun 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log by click5 history-log-by-click5 allows Stored XSS.This issuCheck if you run itEPSS 0.25%Jun 9, 2025
Sort