Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued.Check if you run itEPSS 0.18%Aug 28, 2025
- Medium5.1AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability.Check if you run itEPSS 0.14%Aug 28, 2025
- High7.5Asterisk is an open source private branch exchange and telephony toolkit.Check if you run itEPSS 0.41%Aug 28, 2025
- High8.5A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system.Check if you run itEPSS 0.66%Aug 28, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Chartbeat Chartbeat chartbeat allows Server Side Request Forgery.This issue affects Chartbeat: from n/a through <= 2.0.7.Check if you run itEPSS 0.21%Aug 28, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in vEnCa-X rajce rajce allows Server Side Request Forgery.This issue affects rajce: from n/a through <= 0.4.2.Check if you run itEPSS 0.19%Aug 28, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Metin Saraç Popup for CF7 with Sweet Alert cf7-sweet-alert-popup allows Cross Site Request Forgery.This issue affects Popup for CCheck if you run itEPSS 0.14%Aug 28, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cross Site Request Forgery.This issue affects Hesabfa AccountingCheck if you run itEPSS 0.14%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in thaihavnn07 ATT YouTube Widget att-youtube allows Stored XSS.This issue affects ATT YouTube Widget: from n/a through <= 1.0.Check if you run itEPSS 0.13%Aug 28, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Theme Century Century ToolKit century-toolkit allows Cross Site Request Forgery.This issue affects Century ToolKit: from n/a throCheck if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-storefronts allows Stored XSS.This issue affects Clickbank WCheck if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Splash Screen: from n/a through <Check if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Aaron Axelsen WPMU Ldap Authentication wpmuldap allows Stored XSS.This issue affects WPMU Ldap Authentication: from n/a through <Check if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in shmish111 WP Admin Theme wp-admin-theme allows Stored XSS.This issue affects WP Admin Theme: from n/a through <= 1.0.Check if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in dyiosah Ultimate twitter profile widget ultimate-twitter-profile-widget allows Stored XSS.This issue affects Ultimate twitter proCheck if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in cuckoohello 百度分享按钮 baidushare-wp allows Stored XSS.This issue affects 百度分享按钮: from n/a through <= 1.0.6.Check if you run itEPSS 0.13%Aug 28, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue affects 多说社会化评论框: from n/a through <= 1.2.Check if you run itEPSS 0.14%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: from n/a through <= 1.0.Check if you run itEPSS 0.12%Aug 28, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through <=Check if you run itEPSS 0.14%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in web-able BetPress betpress allows Stored XSS.This issue affects BetPress: from n/a through <= 1.0.1 Lite.Check if you run itEPSS 0.12%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in nonletter Newsletter subscription optin module newsletter-subscription-widget-for-sendblaster allows Stored XSS.This issue affectCheck if you run itEPSS 0.12%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao SEO For Images seo-for-images allows Stored XSS.This issue affects SEO For Images: from n/a through <= 1.0.0.Check if you run itEPSS 0.13%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate ParCheck if you run itEPSS 0.12%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin gn-xml-sitemap allows Stored XSS.This issue affects Google XML News Sitemap plugin: frCheck if you run itEPSS 0.12%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through <= 0.9.1.Check if you run itEPSS 0.13%Aug 28, 2025
Sort