Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 23
   CVE NVD 22h ago

   The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '<fieldname>_start /…

   The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '<fieldname>_start / <fieldname>_end' parameter in all versions up to, and including, 3.3.2 due to…

   CVSS 6.1 CVE-2026-104926 ThemeHigh Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=ThemeHigh&limit=100. RSS for this section: feed.xml.