CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 6 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

WordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability

Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.

CWE-89Jun 26, 2026
CVSS8.5v3.1EPSS0.205%PoCs0SignalsSTIX

WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.

CWE-497Jun 15, 2026
CVSS6.5v3.1EPSS0.345%PoCs0SignalsSTIX

WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability

Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.

CWE-1284Jun 15, 2026
CVSS6.5v3.1EPSS0.219%PoCs0SignalsSTIX

WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.

CWE-79Jun 15, 2026
CVSS6.5v3.1EPSS0.205%PoCs0SignalsSTIX

WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability

Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.

CWE-89Jun 15, 2026
CVSS9.3v3.1EPSS0.283%PoCs0SignalsSTIX

WordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.

CWE-22CWE-862Jun 9, 2024
CVSS8.5v3.1EPSS0.612%PoCs0SignalsSTIX