Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4…Check if you run itEPSS 0.35%Oct 16, 2026
- Medium4.8The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The…Check if you run itEPSS 0.31%Oct 16, 2026
- Critical9.8The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…Check if you run itEPSS 0.51%Oct 16, 2026
- UnknownCVE-2026-104715 affecting package cifs-utils 7.7-1Open the advisoryOct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityOpen the advisoryOct 16, 2026
- UnknownMalicious code in @flexmr/survey-conversation (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @flexmr/survey-client (npm)Open the advisoryOct 16, 2026
- High7.8A flaw was found in cifs-utils.Check if you run itEPSS 0.15%Oct 16, 2026
- High7.2The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site S…Check if you run itEPSS 0.25%Oct 16, 2026
- High7.2The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site S…Check if you run itEPSS 0.28%Oct 16, 2026
- Medium6.5The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter.Check if you run itEPSS 0.58%Oct 16, 2026
- High7.2The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in ver…Check if you run itEPSS 0.19%Oct 16, 2026
- Medium6.1The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirect_url' parameter in versions…Check if you run itEPSS 0.19%Oct 16, 2026
- High8.8The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43.Check if you run itEPSS 0.37%Oct 16, 2026
- Medium5.3The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ…Check if you run itEPSS 0.21%Oct 16, 2026
- High7.2The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter in all versions up to, and including, 1.6.7 due…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium6.4The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and…Check if you run itEPSS 0.20%Oct 16, 2026
- High7.2The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is…Check if you run itEPSS 0.24%Oct 16, 2026
- High8.1The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versio…Check if you run itEPSS 0.34%Oct 16, 2026
- Medium6.5The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'b…Check if you run itEPSS 0.27%Oct 16, 2026