Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and including, 8.1.7 due to…Check if you run itEPSS 0.25%Oct 14, 2026
- High7.2The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and includ…Check if you run itEPSS 0.39%Oct 14, 2026
- High7.2The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in all version…Check if you run itEPSS 0.39%Oct 14, 2026
- Critical9.8The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function.Patch nowKEVEPSS 0.79%Oct 14, 2026
- High7.2The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, and including, 2.…Check if you run itEPSS 0.31%Oct 14, 2026
- High7.5The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up to, and includ…Check if you run itEPSS 0.42%Oct 14, 2026
- High7.2The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and includin…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium6.4The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute in all versions up to,…Check if you run itEPSS 0.21%Oct 14, 2026
- High7.5Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.Check if you run itEPSS 0.25%Oct 14, 2026
- Critical9.8The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter.Check if you run itEPSS 1.03%Oct 14, 2026
- Medium4.7The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.4The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field i…Check if you run itEPSS 0.25%Oct 14, 2026
- High7.2The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including,…Check if you run itEPSS 0.31%Oct 14, 2026
- Unknownlibyaml-perl vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownCVE-2026-63676 is listed by USN-8925-1: YAML-LibYAML vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2019-25777 is listed by USN-8925-1: YAML-LibYAML vulnerabilities.Check if you run itEPSS 0.34%Oct 14, 2026
- UnknownCVE-2017-20285 is listed by USN-8925-1: YAML-LibYAML vulnerabilities.Check if you run itEPSS 0.32%Oct 14, 2026
- UnknownMalicious code in @flexmr/utils (npm)Open the advisoryOct 14, 2026
- UnknownMalicious code in @kre64/hello-npm-test (npm)Open the advisoryOct 14, 2026
- Unknownxen-4.22.0_06-1.1 on GA mediaOpen the advisoryOct 14, 2026
- Unknownpython-Twisted-doc-26.4.0-4.1 on GA mediaOpen the advisoryOct 14, 2026
- Unknownpython-M2Crypto-doc-0.50.0-2.1 on GA mediaOpen the advisoryOct 14, 2026
- UnknownpsqlODBC-18.00.0005-1.1 on GA mediaOpen the advisoryOct 14, 2026
- Unknowncorepack24-24.21.0-1.1 on GA mediaOpen the advisoryOct 14, 2026
- Unknownmatrix-synapse-1.163.0-1.1 on GA mediaOpen the advisoryOct 14, 2026
Sort