Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.3.Check if you run itEPSS 0.17%May 20, 2026
- Medium4.3The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.0.Check if you run itEPSS 0.16%May 20, 2026
- Medium6.4The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribute in the 'facesofusers' shortcode in all versi…Check if you run itEPSS 0.25%May 20, 2026
- Medium4.9The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.5.7.Check if you run itEPSS 0.45%May 20, 2026
- High8.8The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7.Patch nowKEVEPSS 1.31%May 20, 2026
- Medium6.1The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.01.Check if you run itEPSS 0.27%May 20, 2026
- Critical9.8The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, an…Check if you run itEPSS 0.49%May 20, 2026
- Critical9.8The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0.Check if you run itEPSS 0.98%May 20, 2026
- Medium6.4The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute of the , , and shortcodes in all versions up to…Check if you run itEPSS 0.24%May 20, 2026
- High8.8The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.39%May 20, 2026
- Medium4.3The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.16%May 20, 2026
- Medium4.4The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'anomify_api_key' parameter in versions up to…Check if you run itEPSS 0.24%May 20, 2026
- Medium4.3The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.7.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3.Check if you run itEPSS 0.16%May 20, 2026
- Medium4.4The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.1.0.Check if you run itEPSS 0.23%May 20, 2026
- Medium6.4The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode attribute in versions up to and including 2.5.6.Check if you run itEPSS 0.24%May 20, 2026
- Medium6.1The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in versions up to and including 0.9.2.Check if you run itEPSS 0.15%May 20, 2026
- Medium5.4The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to…Check if you run itEPSS 0.32%May 20, 2026
- Medium6.1The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.17%May 20, 2026
- Medium6.5The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and inc…Check if you run itEPSS 0.47%May 20, 2026
- Medium6.4The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js' parameter in versions up to and including 1.4.16.Check if you run itEPSS 0.31%May 20, 2026
- Low2.1Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network…Check if you run itEPSS 0.34%May 20, 2026
- Medium6.9Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c that allows a malicious rsync server to cras…Check if you run itEPSS 0.43%May 20, 2026
- High7.2Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink…Check if you run itEPSS 0.14%May 20, 2026
Sort