Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issueCheck if you run itEPSS 0.29%May 7, 2025
- Medium6.4The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all veCheck if you run itEPSS 0.28%Apr 29, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nasir179125 Image Hover Effects For WPBakery Page Builder image-hover-effects-Check if you run itEPSS 0.26%Apr 24, 2025
- UnknownWpmet gutenkit Missing AuthorizationPatch nowKEVEPSS 10.45%Apr 23, 2025
- High8.8The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_requeCheck if you run itEPSS 2.52%Apr 22, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 78.36%Mar 27, 2025
- Unknownunitecms unlimited_addons_for_wpbakery_page_builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.48%Mar 19, 2025
- Unknownposimyth the_plus_addons_for_elementor Missing AuthorizationPatch nowKEVEPSS 0.56%Aug 26, 2024
- UnknownPlus Addons for Elementor plugin for WordPress file_get_contents VulnerabilityPatch nowKEVEPSS 0.80%Aug 7, 2023
- Unknownposimyth the_plus_addons_for_elementor Improper AuthenticationPatch nowKEVEPSS 14.46%Mar 8, 2021
85 records · page 4 of 4
PreviousNext