Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XS…Check if you run itEPSS 0.15%Apr 29, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.T…Check if you run itEPSS 0.17%Apr 29, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This…Check if you run itEPSS 0.23%Apr 29, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V.Check if you run itEPSS 0.10%Apr 29, 2026
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.T…Check if you run itEPSS 0.25%Apr 29, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue…Check if you run itEPSS 0.14%Apr 29, 2026
- Medium5.3Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/…Check if you run itEPSS 0.19%Apr 29, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request Forgery.This issue affects Share This Image: fro…Check if you run itEPSS 0.14%Apr 29, 2026
- High7.7Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers.Check if you run itEPSS 1.05%Apr 29, 2026
- High7.7Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.Check if you run itEPSS 0.73%Apr 29, 2026
- Medium6.1The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frontend_rewrite' function's 'WPMETEOR[N]WPME…Check if you run itEPSS 0.21%Apr 29, 2026
- Medium5.3Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.Check if you run itEPSS 0.34%Apr 29, 2026
- Low3.1Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.Check if you run itEPSS 0.24%Apr 29, 2026
- Medium6.5A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.Check if you run itEPSS 0.34%Apr 29, 2026
- Medium5.3The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the…Check if you run itEPSS 0.28%Apr 29, 2026
- High8.7This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.Check if you run itEPSS 0.22%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to improper authorization checks during resource access.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to improper access control in resource access validation.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.Check if you run itEPSS 0.48%Apr 29, 2026
- Medium6.5Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.19%Apr 29, 2026
- Critical10.0SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint.Check if you run itEPSS 0.27%Apr 29, 2026
- Medium6.1The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding.Check if you run itEPSS 0.17%Apr 29, 2026
- High7.3Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%Apr 29, 2026
Sort