Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4A vulnerability has been found in Tenda FH451 1.0.0.9.Check if you run itEPSS 1.01%Mar 22, 2026
- Medium6.8RealTerm Serial Terminal 2.0.0.70 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long stri…Check if you run itEPSS 0.22%Mar 21, 2026
- Medium6.8PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Group field.Check if you run itEPSS 0.43%Mar 21, 2026
- Medium6.8jetAudio 8.1.7 contains a buffer overflow vulnerability in the video converter component that allows local attackers to crash the application by supplying an oversized…Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.8SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an…Check if you run itEPSS 0.17%Mar 21, 2026
- Medium6.8Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in…Check if you run itEPSS 0.19%Mar 21, 2026
- Medium4.3The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14.Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.1The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'naam' parameter in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.43%Mar 21, 2026
- Medium6.4The Ad Short plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ad' shortcode's 'client' attribute in all versions up to and including 2.0.1.Check if you run itEPSS 0.33%Mar 21, 2026
- Medium4.3The Xhanch - My Advanced Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium4.3The Lobot Slider Administrator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.0.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.1The Post Snippits plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.1The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'day_from' and 'day_to' parameters in all versions up to, and including, 0.1…Check if you run itEPSS 0.26%Mar 21, 2026
- Medium6.1The rexCrawler plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' and 'regex' parameters in the search-pattern tester page in all versi…Check if you run itEPSS 0.27%Mar 21, 2026
- Medium6.1The Comment Genius plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.2.5 due to insufficie…Check if you run itEPSS 0.27%Mar 21, 2026
- Medium4.3The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.3The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.3The SR WP Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.3The Redirect countdown plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.3The WP Posts Re-order plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium6.4The Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt text in…Check if you run itEPSS 0.19%Mar 21, 2026
- High8.1The Invelity Product Feeds plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 1.2.6.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium5.3OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind met…Check if you run itEPSS 0.35%Mar 21, 2026
- Medium6.0OpenClaw versions prior to 2026.2.25 contain an authentication bypass vulnerability in the trusted-proxy Control UI pairing mechanism that accepts client.id=control-ui…Check if you run itEPSS 0.61%Mar 21, 2026
- Medium6.4The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.37%Mar 21, 2026