Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced Sermons advanced-sermons allows Stored XSS.This issue affecCheck if you run itEPSS 0.19%Jun 17, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in motov.net Ebook Store ebook-store allows Stored XSS.This issue affects Ebook SCheck if you run itEPSS 0.20%Jun 17, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Phishing.This issue affects FunnelKit Automations: fCheck if you run itEPSS 0.23%Jun 17, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Cross Site Request Forgery.This issue affects Advanced Settings: from n/aCheck if you run itEPSS 0.14%Jun 17, 2025
- Medium5.3Missing Authorization vulnerability in AFS Analytics AFS Analytics addfreestats allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AFS Analytics: frCheck if you run itEPSS 0.25%Jun 17, 2025
- Medium5.3Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from n/a through <= 2.9.4Check if you run itEPSS 0.25%Jun 17, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noptin Newsletter Team Noptin newsletter-optin-box allows Stored XSS.This issuCheck if you run itEPSS 0.20%Jun 17, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows StoreCheck if you run itEPSS 0.19%Jun 17, 2025
- Medium4.3Missing Authorization vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arconix FAQCheck if you run itEPSS 0.23%Jun 17, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPACheck if you run itEPSS 0.19%Jun 17, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Server Side Request Forgery.This issue affects ProCheck if you run itEPSS 0.17%Jun 17, 2025
- Medium4.3Missing Authorization vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP ForCheck if you run itEPSS 0.22%Jun 17, 2025
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in themezaa Litho litho allows Path Traversal.This issue affects Litho: from n/a througCheck if you run itEPSS 0.47%Jun 17, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP cubewp-framework allows DOM-Based XSS.This issue affectsCheck if you run itEPSS 0.19%Jun 17, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Stored XSSCheck if you run itEPSS 0.19%Jun 17, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in merkulove Reformer for Elementor reformer-elementor allows Upload a Web Shell to a Web Server.This issue affects ReCheck if you run itEPSS 0.40%Jun 17, 2025
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fastw3b LLC FW Gallery fw-gallery allows Path Traversal.This issue affects FW GallerCheck if you run itEPSS 0.47%Jun 17, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in Fastw3b LLC FW Food Menu allows Using Malicious Files.Check if you run itEPSS 0.40%Jun 17, 2025
- High7.8A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input.Check if you run itEPSS 0.33%Jun 17, 2025
- High7.3A flaw was found in the X Record extension.Check if you run itEPSS 0.34%Jun 17, 2025
- Medium5.5A flaw was found in the X server's request handling.Check if you run itEPSS 0.25%Jun 17, 2025
- Medium6.1A flaw was found in the XFIXES extension.Check if you run itEPSS 0.44%Jun 17, 2025
- High7.3A flaw was found in the Big Requests extension.Check if you run itEPSS 0.37%Jun 17, 2025
- Medium6.1A flaw was found in the X Rendering extension's handling of animated cursors.Check if you run itEPSS 0.34%Jun 17, 2025
- Low2.3Insufficient Session Expiration vulnerability in team-alembic ash_authentication_phoenix allows a session token captured before sign-out to remain usable afterwards.Check if you run itEPSS 0.50%Jun 17, 2025
Sort