Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A flaw has been found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 23, 2026
- Medium5.3The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Informati…Check if you run itEPSS 0.32%Mar 23, 2026
- Low2.1A vulnerability was detected in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.45%Mar 22, 2026
- Medium6.9AdminExpress 1.2.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the System Compare feature.Check if you run itEPSS 0.13%Mar 22, 2026
- High8.5Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying…Check if you run itEPSS 0.15%Mar 22, 2026
- High8.6Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by creating backup jobs.Check if you run itEPSS 0.14%Mar 22, 2026
- High8.8The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4.Check if you run itEPSS 0.52%Mar 22, 2026
- High8.8SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of…Check if you run itEPSS 0.44%Mar 22, 2026
- High8.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7.Patch nowKEVEPSS 0.54%Mar 21, 2026
- High8.7phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.Check if you run itEPSS 1.11%Mar 21, 2026
- High7.1Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.Check if you run itEPSS 0.35%Mar 21, 2026
- Low2.1A flaw has been found in PbootCMS up to 3.2.12.Check if you run itEPSS 0.35%Mar 21, 2026
- High8.8The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2.Check if you run itEPSS 0.44%Mar 21, 2026
- Medium4.4The Review Map by RevuKangaroo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.7 due…Check if you run itEPSS 0.41%Mar 21, 2026
- Medium4.3The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14.Check if you run itEPSS 0.19%Mar 21, 2026
- Medium4.3The Speedup Optimization plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.5.9.Check if you run itEPSS 0.34%Mar 21, 2026
- Medium6.1The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'naam' parameter in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.43%Mar 21, 2026
- Medium5.3The Punnel – Landing Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.1.Check if you run itEPSS 0.51%Mar 21, 2026
- Medium4.4The Wikilookup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Popup Width' setting in all versions up to, and including, 1.1.5.Check if you run itEPSS 0.30%Mar 21, 2026
- Medium4.4The Comment SPAM Wiper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'API Key' setting in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.30%Mar 21, 2026
- Medium5.5The Multi Functional Flexi Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the parameter in all versions up to, and including, 1.2 due t…Check if you run itEPSS 0.36%Mar 21, 2026
- Medium5.3The Canto plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1 via the file.Check if you run itEPSS 1.32%Mar 21, 2026
- High8.8The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up t…Check if you run itEPSS 0.48%Mar 21, 2026
- Medium4.3The Xhanch - My Advanced Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium4.3The Lobot Slider Administrator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.0.Check if you run itEPSS 0.18%Mar 21, 2026