Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in David Shabtai Post Author post-author allows Stored XSS.This issue affects Post Author: from n/a through <= 1.1.1.Check if you run itEPSS 0.15%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in codedraft Mediabay - WordPress Media Library Folders allows Reflected XSS.Check if you run itEPSS 0.14%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in WP Corner Quick Event Calendar quick-event-calendar allows Cross Site Request Forgery.This issue affects Quick Event Calendar: frCheck if you run itEPSS 0.16%Jun 6, 2025
- High7.4Cross-Site Request Forgery (CSRF) vulnerability in wphobby Backwp backwp allows Path Traversal.This issue affects Backwp: from n/a through <= 2.0.2.Check if you run itEPSS 0.19%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Lau CubePoints cubepoints allows Cross Site Request Forgery.This issue affects CubePoints: from n/a through <= 3.2.1.Check if you run itEPSS 0.16%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in mangup Personal Favicon personal-favicon allows Stored XSS.This issue affects Personal Favicon: from n/a through <= 2.0.Check if you run itEPSS 0.15%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Vadim Bogaiskov Bg Orthodox Calendar bg-orthodox-calendar allows Stored XSS.This issue affects Bg Orthodox Calendar: from n/a thrCheck if you run itEPSS 0.14%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in mail250 Free WP Mail SMTP free-wp-mail-smtp allows Stored XSS.This issue affects Free WP Mail SMTP: from n/a through <= 1.0.Check if you run itEPSS 0.15%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in dilemma123 Recent Posts Slider Responsive recent-posts-slider-responsive allows Stored XSS.This issue affects Recent Posts SliderCheck if you run itEPSS 0.14%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in storepro Subscription Renewal Reminders for WooCommerce subscriptions-renewal-reminders allows Cross Site Request Forgery.This isCheck if you run itEPSS 0.16%Jun 6, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Soli WP Mail Options wp-mail-options allows Stored XSS.This issue affects WP Mail Options: from n/a through <= 0.2.3.Check if you run itEPSS 0.14%Jun 6, 2025
- High8.2Cross-Site Request Forgery (CSRF) vulnerability in Webaholicson Epicwin Plugin epicwin-subscribers allows SQL Injection.This issue affects Epicwin Plugin: from n/a through <= 1.5.Check if you run itEPSS 0.18%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Cross Site Request Forgery.This issue affects HCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in ShawonPro SocialMark socialmark allows Server Side Request Forgery.This issue affects SocialMark: from n/a through <= 2.0.7.Check if you run itEPSS 0.22%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL ShorCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in pozzad Global Translator global-translator allows Cross Site Request Forgery.This issue affects Global Translator: from n/a throuCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/QuicCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Giraphix Creative Layouts for Elementor layouts-for-elementor allows Cross Site Request Forgery.This issue affects Layouts for ElCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Booqable Rental Software Booqable Rental booqable-rental-reservations allows Cross Site Request Forgery.This issue affects BooqabCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in jokerbr313 Advanced Post List advanced-post-list allows Cross Site Request Forgery.This issue affects Advanced Post List: from n/Check if you run itEPSS 0.16%Jun 6, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.This issue affects Nexa Blocks: from n/a through <= 1.1.1.Check if you run itEPSS 0.22%Jun 6, 2025
- Medium6.3Cross-Site Request Forgery (CSRF) vulnerability in tggfref WP-Recall allows Privilege Escalation.Check if you run itEPSS 0.15%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link simple-keyword-to-link allows Cross Site Request Forgery.This issue affects Simple KeywoCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in _CreativeMedia_ Elite Video Player elite-video-player allows Cross Site Request Forgery.This issue affects Elite Video Player: frCheck if you run itEPSS 0.15%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Cross Site Request Forgery.This issue affects CubeWP: from n/a through <= 1.1.29.Check if you run itEPSS 0.16%Jun 6, 2025
Sort