Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.Patch nowKEVEPSS 0.50%Aug 18, 2026
- High8.9n8n is an open source workflow automation platform.Check if you run itEPSS 0.30%Aug 18, 2026
- Medium4.3Copyparty is a portable file server.Check if you run itEPSS 0.33%Aug 18, 2026
- Medium6.3Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.Check if you run itEPSS 0.26%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.Check if you run itEPSS 0.35%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium4.3Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.Check if you run itEPSS 0.27%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd.Check if you run itEPSS 0.48%Aug 18, 2026
- High7.5Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.Check if you run itEPSS 0.32%Aug 18, 2026
- High7.2Editor PHP Object Injection in OptionTree <= 2.7.3 versions.Check if you run itEPSS 0.54%Aug 18, 2026
- High8.7Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified atCheck if you run itEPSS 0.74%Aug 18, 2026
- High8.8Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability.Check if you run itEPSS 0.15%Aug 18, 2026
- Medium6.5yawkat LZ4 Java provides LZ4 compression for Java.Check if you run itEPSS 0.47%Aug 18, 2026
Sort