Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.30%Mar 26, 2026
- Low0.5Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.33%Mar 26, 2026
- High7.5The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the parameter in the function in all versions up to, a…Check if you run itEPSS 0.30%Mar 26, 2026
- Medium5.4The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post_title in all versions up to, and including, 6.4.3.Check if you run itEPSS 0.31%Mar 26, 2026
- Medium6.3n8n is an open source workflow automation platform.Check if you run itEPSS 0.42%Mar 25, 2026
- Medium4.8Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of the web interface that all…Check if you run itEPSS 0.19%Mar 25, 2026
- High7.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows un…Check if you run itEPSS 0.35%Mar 25, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.92%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.70%Mar 24, 2026
- High7.5DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.47%Mar 24, 2026
- High7.5Race condition, use-after-free in the Graphics: WebRender component.Check if you run itEPSS 0.35%Mar 24, 2026
- High7.7Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 1.02%Mar 23, 2026
- Medium5.3The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated A…Check if you run itEPSS 0.22%Mar 23, 2026
- Medium6.4The Sheets2Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titles' shortcode attribute in the [sheets2table-render-table] shortcode in…Check if you run itEPSS 0.33%Mar 21, 2026
- High7.2The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.3 via survey result submissions.Check if you run itEPSS 0.28%Mar 21, 2026
- Medium5.7OpenClaw versions prior to 2026.2.25 contain an approval-integrity bypass vulnerability in system.run where rendered command text is used as approval identity while tr…Check if you run itEPSS 0.54%Mar 21, 2026
- Medium4.8OpenClaw versions prior to 2026.2.21 contain an improper sandbox configuration vulnerability that allows attackers to execute arbitrary code by exploiting renderer-sid…Check if you run itEPSS 0.40%Mar 21, 2026
- Medium6.4The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.37%Mar 21, 2026
- Medium6.4The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18.Check if you run itEPSS 0.37%Mar 21, 2026
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.55%Mar 21, 2026
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including, 3.1.14.Check if you run itEPSS 0.26%Mar 21, 2026
- Medium5.4Filament is a collection of full-stack components for accelerated Laravel development.Check if you run itEPSS 0.38%Mar 20, 2026
- Medium5.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.68%Mar 20, 2026
- Medium5.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.71%Mar 20, 2026