Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' ParameterEPSS 0.4%Oct 16, 2026
- High7.2Kirki <= 6.3.2 - Authenticated (Administrator+) PHP Object Injection via Deserialization of Untrusted Input via ZIP Template ImportEPSS 0.5%Oct 16, 2026
- High7.2The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 du…EPSS 0.4%Oct 16, 2026
- Medium4.3Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersEPSS 0.3%Oct 15, 2026
- Medium6.4Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' AttributeEPSS 0.2%Oct 15, 2026
- Medium6.4Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text ContentEPSS 0.2%Oct 15, 2026
- UnknownExternal Control of File Name or PathKEVEPSS 0.4%Oct 15, 2026
- Unknownbrizy brizy Unrestricted Upload of File with Dangerous TypeKEVEPSS 1.0%Oct 13, 2026
- Unknownbrizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.4%Oct 13, 2026
- Medium5.3Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values ar…EPSS 0.2%Oct 5, 2026
- Medium4.3The ECS WordPress plugin before 4.3.13 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who…EPSS 0.3%Aug 15, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityKEVEPSS 30.9%Jun 27, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 88.5%Jun 15, 2026
- Critical9.8Improper Privilege ManagementKEVEPSS 0.8%Jun 2, 2026
- Medium5.4The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to…EPSS 0.4%May 20, 2026
- Medium6.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6.EPSS 0.5%May 19, 2026
- High7.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation…EPSS 0.5%May 19, 2026
- High7.6Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.3%May 15, 2026
- High8.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.4%May 15, 2026
- High8.7Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.3%May 15, 2026
- Medium5.3Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.4%May 15, 2026
- Medium5.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.4%May 15, 2026
- High7.5Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.4%May 15, 2026
- Medium6.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.3%May 15, 2026
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the bt_bb_button shortcode in all versions up to, a…EPSS 0.3%May 14, 2026
74 records · page 1 of 3
PreviousNext