Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).Check if you run itEPSS 0.30%May 12, 2026
- Medium4.3The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Payment Bypass via insecure user meta update in all versions up to, and includi…Check if you run itEPSS 0.22%May 12, 2026
- Critical9.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd.Check if you run itEPSS 0.26%May 12, 2026
- High8.9A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.67%May 12, 2026
- Medium6.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.40%May 12, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.54%May 12, 2026
- High7.2A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.9…Check if you run itEPSS 0.19%May 12, 2026
- High8.7The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.Check if you run itEPSS 0.32%May 12, 2026
- Medium6.9A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80), SIPROTEC 5 7SA82 (CP150) (All versions…Check if you run itEPSS 0.31%May 12, 2026
- Medium6.4The Bootstrap Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%May 12, 2026
- Medium6.4The Advanced Social Media Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.24%May 12, 2026
- Medium5.3The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0.Check if you run itEPSS 0.25%May 12, 2026
- Medium4.3The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.13%May 12, 2026
- Medium4.3The WP-Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.3.Check if you run itEPSS 0.13%May 12, 2026
- Medium6.1The Tm – WordPress Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.12%May 12, 2026
- Medium6.1The WP Google Maps Integration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.2.Check if you run itEPSS 0.21%May 12, 2026
- Medium6.1The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.3.Check if you run itEPSS 0.20%May 12, 2026
- Medium4.3The Forms Rb plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9.Check if you run itEPSS 0.28%May 12, 2026
- Medium4.3The Woo Commerce Minimum Weight plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.0.1.Check if you run itEPSS 0.13%May 12, 2026
- Medium6.4The Shortcodely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'widget_area' parameter in all versions up to, and including, 1.0.1 due to in…Check if you run itEPSS 0.20%May 12, 2026
- Medium6.1The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.26%May 12, 2026
- Medium4.3The Skysa Text Ticker App plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check if you run itEPSS 0.13%May 12, 2026
- Medium4.3The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2.Check if you run itEPSS 0.21%May 12, 2026
- Medium5.3The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.31%May 12, 2026
- High7.2The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_mds AJAX action in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.24%May 12, 2026
Sort