Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 6.7.1.7 due to insuff…Check if you run itEPSS 0.24%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliat…Check if you run itEPSS 0.18%Jan 6, 2026
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4.Open the advisoryDec 4, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.9.4.Open the advisoryDec 2, 2025
- Medium6.4The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Sit…Open the advisoryDec 2, 2025
- Medium6.1The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to,…Open the advisoryAug 28, 2025
- UnknownExtensive VC Addons for WPBakery Php Extract Function Unauthenticated RCEPatch nowKEVEPSS 55.46%Aug 17, 2025
- Critical9.8HasThemes download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.75%Jul 15, 2025
- Critical9.1The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path vaCheck if you run itEPSS 1.46%Jul 15, 2025
- Medium6.4The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘redirectURL’ parameter in all versionsCheck this weekEPSS 28.00%Jul 9, 2025
- Medium4.3Missing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels.Check this weekEPSS 22.00%Jul 4, 2025
- Medium6.5Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Configured Access ContrCheck this weekEPSS 32.00%Jun 20, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Server Side Request Forgery.This issue affects Post andCheck this weekEPSS 19.00%Jun 20, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Cross Site Request Forgery.This issue affects Post and PaCheck this weekEPSS 14.00%Jun 20, 2025
- Medium6.4The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Builder feature in all versions up to, and includingCheck this weekEPSS 19.00%Jun 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-bloCheck if you run itEPSS 0.26%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-eCheck if you run itEPSS 0.20%Jun 6, 2025
- High8.8The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permission_callback() function in versions 2.2.1 tCheck if you run itEPSS 0.43%May 31, 2025
- Medium6.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML attributes in Slider and PostCheck if you run itEPSS 0.35%May 27, 2025
- Medium6.4The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to,Check this weekEPSS 28.00%May 24, 2025
- Medium4.8The Page Builder: Pagelayer WordPress plugin before 1.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoredCheck this weekEPSS 36.00%May 15, 2025
- Medium4.8The Page Builder: Pagelayer WordPress plugin before 1.8.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-SCheck this weekEPSS 33.00%May 15, 2025
- Medium4.3The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to aCheck if you run itEPSS 0.63%May 9, 2025
- High8.7apollotheme ap_pagebuilder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 68.00%May 8, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue afCheck if you run itEPSS 0.31%May 7, 2025