Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18.Check if you run itEPSS 0.28%Mar 21, 2026
- Medium4.9The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3.Check if you run itEPSS 0.41%Mar 21, 2026
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.4The Image Alt Text Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.8.2.Check if you run itEPSS 0.20%Mar 21, 2026
- Low2.7The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the AJAX action.Check if you run itEPSS 0.39%Mar 21, 2026
- Medium4.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.29%Mar 21, 2026
- Low2.7Discourse is an open-source discussion platform.Check if you run itEPSS 0.22%Mar 21, 2026
- Low3.8Discourse is an open-source discussion platform.Check if you run itEPSS 0.17%Mar 21, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.67%Mar 21, 2026
- Medium4.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.23%Mar 21, 2026
- Medium4.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%Mar 21, 2026
- Medium5.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.35%Mar 21, 2026
- High7.5WebCTRL systems that communicate over BACnet inherit the protocol's lack of network layer authentication.Check if you run itEPSS 0.34%Mar 21, 2026
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14.Check if you run itEPSS 0.21%Mar 21, 2026
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including, 3.1.14.Check if you run itEPSS 0.26%Mar 21, 2026
- High7.7Under certain conditions, an attacker could bind to the same port used by WebCTRL.Check if you run itEPSS 0.16%Mar 21, 2026
- Critical9.1Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by an attacker.Check if you run itEPSS 0.20%Mar 21, 2026
- Medium5.5A vulnerability was identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.26%Mar 20, 2026
- High7.5SiYuan is a personal knowledge management system.Check if you run itEPSS 3.26%Mar 20, 2026
- Low1.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%Mar 20, 2026
- Medium4.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%Mar 20, 2026
- Medium5.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.20%Mar 20, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.16%Mar 20, 2026
- High8.2barebox is a bootloader.Check if you run itEPSS 0.11%Mar 20, 2026
Sort