Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Boone Gorges Anthologize anthologize allows Cross Site Request Forgery.This issue affects Anthologize: from n/a through <= 0.8.3.Check if you run itEPSS 0.17%Apr 17, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in momen2009 Theme Changer theme-changer allows Cross Site Request Forgery.This issue affects Theme Changer: from n/a through <= 1.4Check if you run itEPSS 0.17%Apr 17, 2025
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Markus Drubba wpLike2Get wplike2get allows Retrieve Embedded Sensitive Data.This issue aCheck if you run itEPSS 0.38%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Rajesh Broken Links Remover broken-links-remover allows Stored XSS.This issue affects Broken Links Remover: from n/a through <= 1Check if you run itEPSS 0.15%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in swedish boy Dashboard Notepads dashboard-notepads allows Stored XSS.This issue affects Dashboard Notepads: from n/a through <= 1.Check if you run itEPSS 0.15%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in MessageMetric Review Wave – Google Places Reviews review-wave-google-places-reviews allows Stored XSS.This issue affects Review WCheck if you run itEPSS 0.15%Apr 17, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry MaxButtons maxbuttons allows Stored XSS.This issue affects MaxButtoCheck if you run itEPSS 0.28%Apr 17, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Soft8Soft LLC Verge3D verge3d allows Cross Site Request Forgery.This issue affects Verge3D: from n/a through <= 4.9.0.Check if you run itEPSS 0.17%Apr 17, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics WPCafe wp-cafe allows PHP Local File Inclusion.ThCheck if you run itEPSS 0.80%Apr 17, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in algol.plus Advanced Dynamic Pricing for WooCommerce advanced-dynamic-pricing-for-woocommerce allows Cross Site Request Forgery.ThCheck if you run itEPSS 0.17%Apr 17, 2025
- Medium5.4Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/aCheck if you run itEPSS 0.34%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a tCheck if you run itEPSS 0.15%Apr 17, 2025
- Medium5.3Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access ControlCheck if you run itEPSS 0.34%Apr 17, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nawawi Jamili Docket Cache docket-cache allows PHP Local FiCheck if you run itEPSS 0.72%Apr 17, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in teamzt Smart Agreements smart-agreements allows PHP Local FCheck if you run itEPSS 0.72%Apr 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affectCheck if you run itEPSS 0.29%Apr 17, 2025
- High7.1Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.Check if you run itEPSS 0.29%Apr 17, 2025
- Critical9.3Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized acCheck if you run itEPSS 0.28%Apr 17, 2025
- High8.7Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and ContainerizeCheck if you run itEPSS 0.34%Apr 17, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay DXP 2024.Q4.1 through 2024.Q4.7Check if you run itEPSS 0.27%Apr 17, 2025
- Medium4.3Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability.Check if you run itEPSS 0.43%Apr 17, 2025
- Low3.1Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.13%Apr 17, 2025
- Medium5.3The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 1.42.0 via the 'hanCheck if you run itEPSS 0.22%Apr 17, 2025
- Medium6.4The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘limit’ parameter in all versionsCheck if you run itEPSS 0.30%Apr 17, 2025
- Medium5.3The Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products – Restrict Content, Protect WooCommerce Category and more plugin for WordPress is vulneCheck if you run itEPSS 0.37%Apr 17, 2025
Sort