Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3.Check if you run itEPSS 0.16%May 20, 2026
- Medium4.4The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.1.0.Check if you run itEPSS 0.23%May 20, 2026
- Medium6.4The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode attribute in versions up to and including 2.5.6.Check if you run itEPSS 0.24%May 20, 2026
- Medium6.1The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in versions up to and including 0.9.2.Check if you run itEPSS 0.15%May 20, 2026
- Medium5.4The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to…Check if you run itEPSS 0.32%May 20, 2026
- Medium6.1The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.17%May 20, 2026
- Medium6.5The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and inc…Check if you run itEPSS 0.47%May 20, 2026
- Medium6.4The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js' parameter in versions up to and including 1.4.16.Check if you run itEPSS 0.31%May 20, 2026
- Low2.1Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network…Check if you run itEPSS 0.34%May 20, 2026
- Medium6.9Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c that allows a malicious rsync server to cras…Check if you run itEPSS 0.43%May 20, 2026
- High7.2Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink…Check if you run itEPSS 0.14%May 20, 2026
- Medium6.1Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allo…Check if you run itEPSS 0.78%May 20, 2026
- Medium6.3Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot.Check if you run itEPSS 0.28%May 20, 2026
- High7.5The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all version…Check if you run itEPSS 0.40%May 20, 2026
- Medium6.8Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".Check if you run itEPSS 1.89%May 20, 2026
- Medium5.5Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.Check if you run itEPSS 0.18%May 20, 2026
- Medium6.8Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases.Check if you run itEPSS 0.62%May 20, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.37%May 20, 2026
- Medium4.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.25%May 20, 2026
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.Patch nowKEVEPSS 0.28%May 20, 2026
- Critical9.8Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.Check if you run itEPSS 0.37%May 19, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.18%May 19, 2026
- Low2.7Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.Check if you run itEPSS 0.24%May 19, 2026
- Low3.7Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing.Check if you run itEPSS 0.21%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.20%May 19, 2026
Sort