Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownalsa-1.2.16.1-3.1 on GA mediaOpen the advisoryOct 16, 2026
- High7.2The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium6.4Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer RoleCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.2The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter i…Check if you run itEPSS 0.25%Oct 16, 2026
- High8.1Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.Check if you run itEPSS 0.26%Oct 16, 2026
- Medium6.4The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions…Check if you run itEPSS 0.21%Oct 16, 2026
- Medium4.3Arcane: Environment access token bypasses the admin-required authorization gate onCheck if you run itEPSS 0.20%Oct 16, 2026
- High8.8Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)Check if you run itEPSS 0.29%Oct 16, 2026
- Critical9.2Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionCheck if you run itEPSS 0.58%Oct 16, 2026
- High7.2The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to…Check if you run itEPSS 0.31%Oct 16, 2026
- Medium6.5The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1.Check if you run itEPSS 0.28%Oct 16, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Houzez.co Houzez houzez allows Reflected XSS.This issue affects H…Check if you run itEPSS 0.15%Oct 16, 2026
- Critical10.0Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.Patch nowKEVEPSS 0.98%Oct 16, 2026
- Low3.1ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)Open the advisoryOct 16, 2026
- Low3.3ClickMigrate has Path Traversal in "revision -m" argumentOpen the advisoryOct 16, 2026
- Low3.7CoreDNS headless AXFR can emit an empty transfer batch that panics the pluginCheck if you run itEPSS 0.46%Oct 16, 2026
- Medium6.5Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destinationCheck if you run itEPSS 0.17%Oct 16, 2026
- Low3.3gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnlCheck if you run itEPSS 0.31%Oct 16, 2026
- Medium4.3gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsingCheck if you run itEPSS 0.15%Oct 16, 2026
- UnknownRank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious CodeOpen the advisoryOct 16, 2026
- Critical9.8The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.Patch nowKEVEPSS 0.44%Oct 16, 2026
- Medium4.3Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update HookCheck if you run itEPSS 0.21%Oct 16, 2026
- High7.5sync 2026-10-16T15:41:51ZCheck if you run itEPSS 0.28%Oct 16, 2026
- High7.5JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoSCheck if you run itEPSS 0.34%Oct 16, 2026
- UnknownA heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a cra…Check if you run itEPSS 0.18%Oct 16, 2026