Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect.Check if you run itEPSS 0.43%Sep 22, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail MinCheck if you run itEPSS 0.36%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Stored XSS.This issue affeCheck if you run itEPSS 0.28%Sep 22, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in Binsaifullah Beaf image-compare-block allows Server Side Request Forgery.This issue affects Beaf: from n/a through <= 1.6.2.Check if you run itEPSS 0.25%Sep 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issCheck if you run itEPSS 0.30%Sep 22, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus@hotmail.com Wp tabber widget wp-tabber-widget allows SQL Injection.ThCheck if you run itEPSS 0.38%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP CompressCheck if you run itEPSS 0.46%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in Heureka Group Heureka heureka allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Heureka: from n/a through <=Check if you run itEPSS 0.36%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool skimlinks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects SkiCheck if you run itEPSS 0.35%Sep 22, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Damian BP Disable Activation Reloaded bp-disable-activation-reloaded allows Accessing Functionality Not Properly Constrained by ACheck if you run itEPSS 0.16%Sep 22, 2025
- Medium4.3Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.25%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in InterServer Mail Baby SMTP mail-baby-smtp allows Cross Site Request Forgery.This issue affects Mail Baby SMTP: from n/a through <Check if you run itEPSS 0.14%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in memberful Memberful - Membership Plugin memberful-wp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MembeCheck if you run itEPSS 0.27%Sep 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in straightvisions GmbH SV Proven Expert sv-provenexpert allows Cross Site Request Forgery.This issue affects SV Proven Expert: fromCheck if you run itEPSS 0.14%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.ThiCheck if you run itEPSS 0.28%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aum Watcharapon Designil PDPA Thailand pdpa-thailand allows Stored XSS.This isCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in Sumit Singh Classic Widgets with Block-based Widgets classic-widgets-with-block-based-widgets allows Accessing Functionality Not Properly ConCheck if you run itEPSS 0.27%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vadim Bogaiskov Bg Church Memos bg-church-memos allows DOM-Based XSS.This issuCheck if you run itEPSS 0.21%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in PressPage Entertainment Inc Mavis HTTPS to HTTP Redirection mavis-https-to-http-redirect allows Stored XSS.This issue affects MavCheck if you run itEPSS 0.13%Sep 22, 2025
- High7.5Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.26%Sep 22, 2025
- Medium5.5BunnyPad is a note taking software.Check if you run itEPSS 0.17%Sep 22, 2025
- Medium6.9A weakness has been identified in Campcodes Farm Management System 1.0.Check if you run itEPSS 0.42%Sep 22, 2025
- Medium5.3A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.39%Sep 22, 2025
- Medium5.3A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.39%Sep 22, 2025
- Medium6.5CubeCart is an ecommerce software solution.Check if you run itEPSS 0.40%Sep 22, 2025
Sort