Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter…Check if you run itEPSS 0.33%Oct 16, 2026
- High7.2The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…Check if you run itEPSS 0.31%Oct 16, 2026
- High7.2The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 du…Check if you run itEPSS 0.36%Oct 16, 2026
- Medium5.9The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter.Check if you run itEPSS 0.77%Oct 16, 2026
- High8.1The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the parameter in versions up to, and including, 3.3.0.Check if you run itEPSS 0.52%Oct 16, 2026
- Medium4.9The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].Check if you run itEPSS 0.38%Oct 16, 2026
- Medium4.8A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52.Check if you run itEPSS 0.12%Oct 16, 2026
- Low0.9A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0.Check if you run itEPSS 0.11%Oct 16, 2026
- High8.6A hard-coded cryptographic key vulnerability exists in the of some of Moxa's industrial computing products.Check if you run itEPSS 0.15%Oct 16, 2026
- Medium6.9A missing authorization vulnerability exists in the internal API of some of Moxa's industrial computing products.Check if you run itEPSS 0.13%Oct 16, 2026
- Medium4.8The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2.Check if you run itEPSS 0.26%Oct 16, 2026
- High7.0ISPSoft Out-of-Bounds Read VulnerabilityCheck if you run itEPSS 0.31%Oct 16, 2026
- High7.0ISPSoft Out-of-Bounds Read VulnerabilityCheck if you run itEPSS 0.31%Oct 16, 2026
- High8.3Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing ValidationCheck if you run itEPSS 0.22%Oct 16, 2026
- Medium5.3Frappe before 16.33.0 restrict_ip Allowlist Bypass via API Key, OAuth AuthenticationCheck if you run itEPSS 0.17%Oct 16, 2026
- High7.1Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List EndpointCheck if you run itEPSS 0.26%Oct 16, 2026
- Medium5.3Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfigCheck if you run itEPSS 0.21%Oct 16, 2026
- Medium6.3Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer ToolsCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.1Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketCheck if you run itEPSS 0.29%Oct 16, 2026
- High7.1Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketCheck if you run itEPSS 0.29%Oct 16, 2026
- High8.8FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineCheck if you run itEPSS 0.29%Oct 16, 2026
- High7.8FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserCheck if you run itEPSS 0.12%Oct 16, 2026
- High8.8FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsCheck if you run itEPSS 0.26%Oct 16, 2026
- High7.3FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3Check if you run itEPSS 0.13%Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserCheck if you run itEPSS 0.33%Oct 16, 2026