Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Sherk Custom Post Type Displays plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute in all versions up to, and in…Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.4The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18.Check if you run itEPSS 0.37%Mar 21, 2026
- Medium4.9The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3.Check if you run itEPSS 0.61%Mar 21, 2026
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.55%Mar 21, 2026
- Medium5.5A vulnerability was identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.43%Mar 20, 2026
- High7.5SimpleJWT is a simple JSON web token library written in PHP.Check if you run itEPSS 0.56%Mar 20, 2026
- High7.2An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.Check if you run itEPSS 0.90%Mar 20, 2026
- Medium5.1XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arb…Check if you run itEPSS 0.34%Mar 20, 2026
- Low2.1A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.33%Mar 20, 2026
- Medium6.1WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.32%Mar 20, 2026
- Medium6.1WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.38%Mar 20, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.49%Mar 20, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Melania allows PHP Local File Inclusi…Check if you run itEPSS 0.47%Mar 20, 2026
- Medium5.3The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17.Check if you run itEPSS 0.55%Mar 20, 2026
- Medium5.4Filament is a collection of full-stack components for accelerated Laravel development.Check if you run itEPSS 0.38%Mar 20, 2026
- High8.8FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.74%Mar 20, 2026
- Medium4.8FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.34%Mar 20, 2026
- Medium6.5The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of…Check if you run itEPSS 0.52%Mar 20, 2026
- Medium5.4Jexactyl is a customisable game management panel and billing system.Check if you run itEPSS 0.25%Mar 20, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.38%Mar 20, 2026
- Low2.0A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0.Check if you run itEPSS 0.53%Mar 20, 2026
- High8.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.38%Mar 20, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.48%Mar 20, 2026
- High8.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.54%Mar 20, 2026