Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.20.1 via the gutenbee_file_and_ext_…Check if you run itEPSS 0.68%May 28, 2026
- Medium4.3The 3D Viewer – 3D Model Viewer – Augmented Reality – Virtual Try On plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.23%May 28, 2026
- High8.6The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to…Check if you run itEPSS 0.21%May 28, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'append_whe…Check if you run itEPSS 0.55%May 28, 2026
- Medium6.1The Easy Updates Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'paged' parameter in versions up to, and including, 9.0.20 This i…Check if you run itEPSS 0.21%May 28, 2026
- Medium5.3The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for Wor…Check if you run itEPSS 0.35%May 28, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'User-Agent' header in all versions up to, and including, 5.4.11 due t…Check if you run itEPSS 0.44%May 28, 2026
- Medium4.3The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0.Check if you run itEPSS 0.25%May 28, 2026
- Medium5.3The Geo Mashup plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.13.19.Check if you run itEPSS 0.33%May 28, 2026
- High7.2The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file_upload' parameter in all v…Check if you run itEPSS 0.29%May 28, 2026
- High8.1The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object I…Check if you run itEPSS 0.25%May 28, 2026
- Medium6.4The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in the _filte…Check if you run itEPSS 0.29%May 28, 2026
- High7.0A command injection vulnerability was discovered in the utility of RPM.Check if you run itEPSS 0.57%May 28, 2026
- Medium5.3A flaw was found in Keycloak's ClientRegistrationAuth component.Check if you run itEPSS 0.42%May 28, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.30%May 28, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.48%May 28, 2026
- Medium4.3A flaw was found in Keycloak, an open-source identity and access management solution.Check if you run itEPSS 0.38%May 28, 2026
- Medium5.5Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjection option which can be bypassed.Check if you run itEPSS 0.17%May 28, 2026
- Medium6.4The LiveSmart Video Chat Live Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livesmart_widget' shortcode in all version…Check if you run itEPSS 0.16%May 28, 2026
- High8.8The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filter…Check if you run itEPSS 0.45%May 28, 2026
- Medium4.3The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7.Check if you run itEPSS 0.14%May 28, 2026
- Medium6.5The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1.Check if you run itEPSS 0.24%May 28, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.22%May 28, 2026
- High7.3A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature.Check if you run itEPSS 0.35%May 28, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 28, 2026
Sort