Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor exclusive-addons-for-elementor allowsCheck if you run itEPSS 0.31%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in sminozzi reCAPTCHA for all recaptcha-for-all allows Cross Site Request Forgery.This issue affects reCAPTCHA for all: from n/a thrCheck if you run itEPSS 0.17%May 19, 2025
- Medium6.5Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Legal Pages: from n/Check if you run itEPSS 0.40%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Cost of Goods for WooCommerce cost-of-goods-for-woocommerce allows SCheck if you run itEPSS 0.27%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Product Notes Tab & Private Admin Notes for WooCommerce product-noteCheck if you run itEPSS 0.27%May 19, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in awcode AWcode Toolkit awcode-toolkit allows Stored XSS.This issue affects AWcode Toolkit: from n/a through <= 1.0.18.Check if you run itEPSS 0.15%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Stored XSSCheck if you run itEPSS 0.27%May 19, 2025
- High8.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.net bunny.net bunnycdn allows Stored XSS.This issue affects bunny.net: fCheck if you run itEPSS 0.48%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bogdan Bendziukov WP Image Mask wp-image-mask allows DOM-Based XSS.This issueCheck if you run itEPSS 0.27%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows DOM-Based XSS.This issuCheck if you run itEPSS 0.30%May 19, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in affmngr Affiliates Manager Google reCAPTCHA Integration affiliates-manager-google-recaptcha-integration allows Stored XSS.This isCheck if you run itEPSS 0.15%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementoCheck if you run itEPSS 0.27%May 19, 2025
- Medium6.9A vulnerability was found in projectworlds Online Food Ordering System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability was found in SourceCodester Stock Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical.Check if you run itEPSS 0.56%May 19, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.53%May 19, 2025
- Medium5.3A vulnerability in the function of the module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack.Check if you run itEPSS 0.61%May 19, 2025
- Medium6.9A vulnerability was found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability was found in projectworlds Online Lawyer Management System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium5.1A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical.Check if you run itEPSS 0.49%May 19, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical.Check if you run itEPSS 0.56%May 19, 2025
Sort