Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiti…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting p…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scrip…Check if you run itEPSS 0.20%May 10, 2026
- Medium5.1WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by fai…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress 3dady Real-Time Web Stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript…Check if you run itEPSS 0.22%May 10, 2026
- High8.7Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the i…Check if you run itEPSS 0.35%May 10, 2026
- Medium5.1Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter.Check if you run itEPSS 0.30%May 10, 2026
- Medium5.3OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint.Check if you run itEPSS 0.13%May 10, 2026
- Medium5.1WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit C…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject…Check if you run itEPSS 0.19%May 10, 2026
- High8.7CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink att…Check if you run itEPSS 0.53%May 10, 2026
- Medium5.1WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text f…Check if you run itEPSS 0.17%May 10, 2026
- Medium5.1Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in t…Check if you run itEPSS 0.20%May 10, 2026
- Medium6.9OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account detai…Check if you run itEPSS 0.15%May 10, 2026
- High8.5Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting…Check if you run itEPSS 0.11%May 10, 2026
- High8.7memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character buffers into note fields.Check if you run itEPSS 0.28%May 10, 2026
- High8.7TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files…Check if you run itEPSS 0.62%May 10, 2026
- High8.8WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting mali…Check if you run itEPSS 0.28%May 10, 2026
- Critical9.3WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious…Check if you run itEPSS 0.40%May 10, 2026
- High8.7Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system command…Check if you run itEPSS 0.64%May 10, 2026
- High8.7ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP…Check if you run itEPSS 0.57%May 10, 2026
- High8.7e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme installation permissions to execute arbitrary commands by uplo…Check if you run itEPSS 0.59%May 10, 2026
- Critical9.3OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disg…Check if you run itEPSS 0.66%May 10, 2026
- High8.7Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized…Check if you run itEPSS 0.93%May 10, 2026
- Critical9.3WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to…Check if you run itEPSS 0.59%May 10, 2026
Sort