Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityVuln · CVE-2026-41940 · WebPros · cPanel & WHM and WP2 (WordPress Squared) · CISA KEV · CVE.org · FIRST EPSS · cPanel, WordPressPatch nowKEVEPSS 98.53%Apr 28, 2026
High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affVuln · CVE-2025-49316 · Saleswonder Team: Tobias · WP2LEADS · EUVDCheck this weekEPSS 34.00%Jun 17, 2025
High7.1Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This issue affects WP2LEADS: from n/a through <= 3.5.0.Vuln · CVE-2025-32922 · Saleswonder Team: Tobias · WP2LEADS · CVE.org · FIRST EPSS · EUVDCheck if you run itEPSS 0.15%May 15, 2025