Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginPatch nowKEVEPSS 0.31%Oct 7, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.41%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%Oct 6, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 39.98%Sep 22, 2026
- High7.1WordPress 7.1.1 Maintenance and Security ReleaseCheck if you run itEPSS 0.35%Sep 18, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPPatch nowKEVEPSS 2.25%Aug 28, 2026
- UnknownMiniOrange saml_sp_single_sign_on Incorrect Privilege AssignmentPatch nowKEVEPSS 0.37%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationPatch nowKEVEPSS 1.88%Aug 21, 2026
- UnknownCritical Unauthenticated File Upload to RCE in Elementor Pro PluginPatch nowKEVEPSS 1.99%Aug 19, 2026
- UnknownCVE-2026-64638 is listed by WordPress 7.0.3 Released: 12 Vulnerabilities Found and Fixed.Check if you run itEPSS 0.89%Aug 6, 2026
- UnknownCVE-2026-18072 is listed by Protect The Shire solves one problem, but risks making another worse.Check if you run itEPSS 2.98%Jul 30, 2026
- UnknownCVE-2026-15000 is listed by Protect The Shire solves one problem, but risks making another worse.Check if you run itEPSS 0.59%Jul 30, 2026
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityPatch nowKEVEPSS 10.65%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
14 records · page 1 of 1
PreviousNext