Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login logging mechanism.Check if you run itEPSS 0.21%May 14, 2026
- Medium5.1Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and earlier, located at the ‘/app/FrontController’ endpoint via the ‘legalName’ and ‘employeeID’ parameters.Check if you run itEPSS 0.44%May 14, 2026
- High7.5The Database Backup for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.57%May 14, 2026
- High8.1The Database Backup for WordPress plugin for WordPress is vulnerable to unauthorized arbitrary file read and deletion in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.57%May 14, 2026
- High7.5The Database Backup for WordPress plugin for WordPress is vulnerable to unauthorized database export in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.50%May 14, 2026
- Medium5.3The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5.Check if you run itEPSS 0.43%May 14, 2026
- Critical9.8The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.70%May 14, 2026
- High8.8The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.51%May 14, 2026
- Medium6.5The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.5.13.Check if you run itEPSS 0.31%May 14, 2026
- High7.2The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31.Check if you run itEPSS 0.32%May 14, 2026
- Critical9.8The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1.Patch nowKEVEPSS 3.01%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Critical9.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.54%May 13, 2026
- High7.2CubeCart is an ecommerce software solution.Check if you run itEPSS 0.54%May 13, 2026
- High8.7Quark Drive before 0.8.5 contains a mass assignment vulnerability in the POST /update endpoint that allows authenticated attackers to overwrite administrator credentia…Check if you run itEPSS 0.63%May 13, 2026
- High8.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.20%May 13, 2026
- Medium4.9CubeCart is an ecommerce software solution.Check if you run itEPSS 0.40%May 13, 2026
- High8.6MISP is an open source threat intelligence and sharing platform.Check if you run itEPSS 0.58%May 13, 2026
- Critical9.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.96%May 13, 2026
- Medium4.8CubeCart is an ecommerce software solution.Check if you run itEPSS 0.24%May 13, 2026
- High7.2CubeCart is an ecommerce software solution.Check if you run itEPSS 0.45%May 13, 2026
- Medium5.0The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack.Check if you run itEPSS 0.14%May 13, 2026
- Critical9.3The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack.Check if you run itEPSS 0.14%May 13, 2026
- Critical9.1fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.33%May 13, 2026
- High7.1An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard.Check if you run itEPSS 0.23%May 13, 2026