Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'follow_us_text' setting of the Mount widget in all v…Check if you run itEPSS 0.36%Apr 8, 2026
- Medium6.4The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'skin' attribute of the learn_press_courses shortcode i…Check if you run itEPSS 0.31%Apr 8, 2026
- Medium5.3The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6.Check if you run itEPSS 0.55%Apr 8, 2026
- Critical9.8The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15.Patch nowKEVEPSS 0.89%Apr 8, 2026
- Medium5.3The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to Missing Authorization via the plugin's webhook handler in all versions up to, and i…Check if you run itEPSS 0.39%Apr 8, 2026
- Medium6.4The Investi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'investi-announcements-accordion' shortcode's 'maximum-num-years' attribute in al…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.4The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableon_button' shortcode in all versions up…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.4The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonial_view shortcode in all versions up to, and includ…Check if you run itEPSS 0.20%Apr 8, 2026
- Medium6.4The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attribute in the shortcode in all versions up to, and including, 2.3.4.Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.4The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including…Check if you run itEPSS 0.21%Apr 8, 2026
- High8.4ASDA-Soft Stack-based Buffer Overflow VulnerabilityCheck if you run itEPSS 0.34%Apr 8, 2026
- Medium4.1An insufficient session expiration vulnerability exists in the latest version of parisneo/lollms.Check if you run itEPSS 0.23%Apr 8, 2026
- High8.8The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 th…Check if you run itEPSS 0.17%Apr 8, 2026
- Critical9.8WPEverest everest_forms Deserialization of Untrusted DataPatch nowKEVEPSS 3.59%Apr 8, 2026
- High8.2When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case tha…Check if you run itEPSS 0.34%Apr 8, 2026
- Medium6.1Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used.Check if you run itEPSS 0.29%Apr 8, 2026
- Medium5.5tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sp…Check if you run itEPSS 0.29%Apr 8, 2026
- High7.5If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.Check if you run itEPSS 0.62%Apr 8, 2026
- Medium6.4On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when th…Check if you run itEPSS 0.29%Apr 8, 2026
- High7.5Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly ca…Check if you run itEPSS 0.36%Apr 8, 2026
- High7.5During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermedia…Check if you run itEPSS 0.61%Apr 8, 2026
- High7.1The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determina…Check if you run itEPSS 0.26%Apr 8, 2026
- Critical9.8Arithmetic over induction variables in loops were not correctly checked for underflow or overflow.Check if you run itEPSS 0.54%Apr 8, 2026
- High8.8SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.Check if you run itEPSS 0.66%Apr 8, 2026
- Medium6.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in all ve…Check if you run itEPSS 0.34%Apr 8, 2026
Sort