Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- HighImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue a…Check if you run itEPSS 0.14%Oct 13, 2026
- High7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 1.20%Oct 13, 2026
- MediumThe Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter in all versions up to, and including, 3.3.58 due t…Check if you run itEPSS 0.15%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 0.97%Oct 13, 2026
- High7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 1.20%Oct 13, 2026
- High8.8Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.53%Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityPatch nowKEVEPSS 9.81%Oct 13, 2026
- HighThe Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name User Field in all versions up to, and includi…Check if you run itEPSS 0.24%Oct 13, 2026
- HighThe WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter…Check if you run itEPSS 0.32%Oct 13, 2026
- MediumThe Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versions up to, and including, 1.…Check if you run itEPSS 0.19%Oct 13, 2026
- HighThe Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insu…Check if you run itEPSS 0.24%Oct 13, 2026
- HighThe Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all…Check if you run itEPSS 0.29%Oct 13, 2026
- HighThe Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]'…Check if you run itEPSS 0.39%Oct 13, 2026
- MediumThe Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versi…Check if you run itEPSS 0.23%Oct 13, 2026
- HighImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hex allows a malicious package publisher to delete a directory ou…Check if you run itEPSS 0.44%Oct 13, 2026
- MediumGitea private repository access retained after rejected transferCheck if you run itEPSS 0.24%Oct 13, 2026
- HighGitea expanded a workflow's static into its full Cartesian product without a size limit when creating a run, before the fork pull request approval gate applied.Check if you run itEPSS 0.35%Oct 13, 2026
- MediumThe User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable…Check if you run itEPSS 0.21%Oct 13, 2026
- HighThe WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and inc…Check if you run itEPSS 0.24%Oct 13, 2026
- MediumThe Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions…Check if you run itEPSS 0.20%Oct 13, 2026
- HighThe Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions'…Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.1Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL.Check if you run itEPSS 0.23%Oct 13, 2026
- HighWhen Gitea's web installer is reachable against a database that already contains users, such as after has been reset to , submitting the install form with an administr…Check if you run itEPSS 0.58%Oct 13, 2026
- MediumGitea migration SSRF to reserved addresses through ALLOWED_DOMAINSCheck if you run itEPSS 0.20%Oct 13, 2026
- HighA repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references…Check if you run itEPSS 0.35%Oct 13, 2026
Sort