Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.Check if you run itEPSS 0.26%Jul 4, 2025
- High7.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chatra Chatra Live Chat + ChatBot + Cart Saver allows Stored XSS.Check if you run itEPSS 0.44%Jul 4, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Brian S.Check if you run itEPSS 0.15%Jul 4, 2025
- Medium6.5A flaw was found in the key export functionality of libssh.Check if you run itEPSS 0.61%Jul 4, 2025
- Medium5.0A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation.Check if you run itEPSS 0.50%Jul 4, 2025
- Medium6.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-url' DOM element attribute in all versions up to, andCheck if you run itEPSS 0.20%Jul 4, 2025
- Medium6.4The ProcessingJS for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pjs4wp' shortcode in all versions up to, and including, 1.2.2 dueCheck if you run itEPSS 0.22%Jul 4, 2025
- High7.5The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due tCheck if you run itEPSS 0.40%Jul 4, 2025
- Medium4.3The WP Firebase Push Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.15%Jul 4, 2025
- Medium6.4The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'smartdocs_search' shortcode in all versions up to, and including, 1.1.0 due to inCheck if you run itEPSS 0.26%Jul 4, 2025
- High7.5The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insuffCheck if you run itEPSS 0.41%Jul 4, 2025
- High7.2The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_locInstall function in all versions up to,Check if you run itEPSS 1.26%Jul 4, 2025
- High7.2The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the do_updatecar and createcar functCheck if you run itEPSS 0.76%Jul 3, 2025
- Medium4.9n8n is a workflow automation platform.Check if you run itEPSS 0.37%Jul 3, 2025
- High8.6Short Description is a MediaWiki extension that provides local short description support.Check if you run itEPSS 0.34%Jul 3, 2025
- Critical9.3An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility developed by Aexol Studio, in versions up to and including 2025.7.Check if you run itEPSS 2.35%Jul 3, 2025
- Critical9.0An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3.Check if you run itEPSS 6.88%Jul 3, 2025
- Critical9.3A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services.Check if you run itEPSS 6.59%Jul 3, 2025
- High7.5Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution.Check if you run itEPSS 4.22%Jul 3, 2025
- Critical9.3A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations.Check if you run itEPSS 1.94%Jul 3, 2025
- High8.6Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.Check if you run itEPSS 0.38%Jul 3, 2025
- High8.6Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.Check if you run itEPSS 0.34%Jul 3, 2025
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in WebFactory AiBud WP aibuddy-openai-chatgpt allows Upload a Web Shell to a Web Server.This issue affects AiBud WP: fCheck if you run itEPSS 0.50%Jul 3, 2025
- Medium6.3Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.Check if you run itEPSS 0.28%Jul 3, 2025
- High8.2Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE.Check if you run itEPSS 0.40%Jul 3, 2025
Sort