Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin setti…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by explo…Check if you run itEPSS 0.21%May 10, 2026
- Medium5.1WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating…Check if you run itEPSS 0.20%May 10, 2026
- Medium5.1Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manip…Check if you run itEPSS 0.24%May 10, 2026
- Medium6.9WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insu…Check if you run itEPSS 0.15%May 10, 2026
- Medium5.3WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting ma…Check if you run itEPSS 0.13%May 10, 2026
- Medium6.9WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating…Check if you run itEPSS 0.39%May 10, 2026
- Medium5.1WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiti…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting p…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scrip…Check if you run itEPSS 0.20%May 10, 2026
- Medium5.1WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by fai…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress 3dady Real-Time Web Stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript…Check if you run itEPSS 0.22%May 10, 2026
- High8.7Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the i…Check if you run itEPSS 0.35%May 10, 2026
- Medium5.1Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter.Check if you run itEPSS 0.30%May 10, 2026
- Medium5.3OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint.Check if you run itEPSS 0.13%May 10, 2026
- Medium5.1WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit C…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject…Check if you run itEPSS 0.19%May 10, 2026
- High8.7CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink att…Check if you run itEPSS 0.53%May 10, 2026
- Medium5.1WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text f…Check if you run itEPSS 0.17%May 10, 2026
- Medium5.1Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in t…Check if you run itEPSS 0.20%May 10, 2026
Sort