Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Unknownlubus wp_query_console Improper Control of Generation of Code ('Code Injection')Vuln · CVE-2024-50498 · lubus · wp_query_console · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 52.91%Dec 10, 2024
UnknownHunk Companion Plugin Unauthenticated POST Request VulnerabilityVuln · CVE-2024-11972 · ThemeHunk · Hunk Companion Plugin · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 59.05%Dec 10, 2024
UnknownHunk Companion Plugin for WordPress /wp-json/hc/v1/themehunk-import REST API VulnerabilityVuln · CVE-2024-9707 · ThemeHunk · Hunk Companion Plugin · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 9.08%Oct 11, 2024
UnknownUnpatched Vulnerability in TI WooCommerce Wishlist PluginVuln · CVE-2024-9156 · WordPress · WordPress · CVE.org · FIRST EPSS · WPScan Vulnerability Database · WordPressCheck if you run itEPSS 0.39%Sep 9, 2024
UnknownUnauthenticated Privilege Escalation in Profile-Builder pluginVuln · CVE-2024-6695 · cozmoslabs · profile_builder · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.80%Jul 15, 2024
UnknownObject Injection vulnerability fixed in SEOPress 7.9Vuln · CVE-2024-5488 · WordPress · WordPress · CVE.org · FIRST EPSS · WPScan Vulnerability Database · WordPressCheck if you run itEPSS 3.74%Jun 24, 2024