S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
6,037 tools·Free, no account required

Product CVE Scanners (Web)

When a CVE is published for a popular web product, attackers scan the internet within hours. These product-specific scanners let you check whether your WordPress plugins, CMS, or web framework is vulnerable before exploitation happens.

By the numbers
6k
Product CVEs (Web) scanners
in this category
16.5M
Automated runs
scans executed here
373.4k
Assets scanned
verified across S4E
NewestCVE-2026-26216 Scanner→
Run Full Scan →← All categories
Web VulnerabilitiesNetwork VulnerabilitiesMisconfigurationInformation ScansExposed PanelsProduct CVEs (Network)DNS ControlsSSL Controls
Featured in this category

Important Product CVEs (Web) Scanners

Browse all 6,037 tools →
critical10.0

WordPress Plugin Vulnerabilities Scanner

Detects vulnerabilities in WordPress plugins that can expose websites to serious security risks. Identifies common plugin flaws such as Remote Code Execution (RCE), SQL injection, and insecure file handling.

~300sSingle assetBulk scanAPI
May 12, 2025
critical10.0

Apache OFBiz Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Apache OFBiz affects v. prior to 8.12.03. This scanner helps in identifying potential RCE flaws associated with the Apache Log4j library in Apache OFBiz.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical9.0

CVE-2021-45046 Scanner (Version Based)

CVE-2021-45046 Scanner (Version Based) - Remote Code Execution (RCE) vulnerability in Apache Log4j2

~10sSingle assetBulk scanAPI
Nov 8, 2025
critical10.0

Apache Druid Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Apache Druid.

~10sSingle assetBulk scanAPI
Oct 12, 2025
critical9.8

Ingress NGINX Admission Controller Exposure Detection Scanner

Detects publicly exposed Ingress NGINX admission controller endpoints through TLS certificate analysis. External exposure of this webhook is a critical misconfiguration that allows unauthenticated attackers to inject malicious configurations, potentially leading to Kubernetes cluster compromise.

~10sSingle assetBulk scanAPI
Mar 25, 2025
high7.2

WordPress WooCommerce Google Shopping Cross-Site Scripting Scanner

Targets the search GET parameter in WooCommerce Google Shopping plugin versions < 1.2.4, allowing attackers to inject malicious scripts.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical9.0

WordPress Zero Spam SQL Injection Scanner

Detects 'SQL Injection' vulnerability in WordPress Zero Spam affecting versions <= 2.1.1.

~60sSingle assetBulk scanAPI
Oct 8, 2024
high7.5

WordPress WP Statistics Plugin SQL Injection Scanner

Detects 'SQL Injection' vulnerability in WordPress WP Statistics Plugin affects v. 13.0.7.

~60sSingle assetBulk scanAPI
Oct 8, 2024
high8.6

WordPress Hide Security Enhancer Local File Inclusion Scanner

Detects 'Local File Inclusion (LFI)' vulnerability in WordPress Hide Security Enhancer affects v. 1.3.9.2 or less.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CNVD-2021-09650 Scanner

Detects 'Remote Code Execution' vulnerability in Ruijie EWEB Network Management System.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

ECTouch SQL Injection Scanner

Targets user input parameters in ECTouch 2's mobile commerce modules, allowing attackers to execute arbitrary SQL queries and extract sensitive database contents.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

GoAnywhere Managed File Transfer Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in GoAnywhere Managed File Transfer.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CNVD-2021-26422 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in eYouMail.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Cisco CloudCenter Suite Log4j Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (Apache Log4j)' vulnerability in Cisco CloudCenter Suite

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

CNVD-2021-30167 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in UFIDA NC.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Duomi CMS SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in Duomi CMS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

JamF Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in JamF. The scanner identifies weaknesses related to the JNDI features in Apache Log4j2.

~10sSingle assetBulk scan
Oct 8, 2024
critical10.0

Graylog Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Graylog.

~10sSingle assetBulk scan
Oct 8, 2024
critical10.0

Fastjson 1.2.41 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.41

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CNVD-2020-46552 Scanner

Detects 'Remote Code Execution' vulnerability in Sangfor EDR.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

ECShop SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in ECShop. This scan evaluates whether crafted Referer header payloads can trigger unsafe SQL execution, enabling unauthorized access to sensitive database content.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2024-3273 Scanner

CVE-2024-3273 scanner - Command Injection vulnerability in D-Link Network Attached Storage

~10sSingle assetBulk scanAPI
May 26, 2024
critical10.0

CVE-2005-3344 Scanner

CVE-2005-3344 scanner - Unauthenticated Admin Access vulnerability in Horde Groupware

~10sSingle assetBulk scanAPI
Jan 6, 2024
critical10.0

Online Prestashop Blocktestimonial Modules Unrestricted File Upload vulnerability scanner

This scanner detects Unrestricted File Upload vulnerability in your Prestashop Blocktestimonial Modules assets.

~15sSingle assetBulk scanAPI
Feb 9, 2024
critical10.0

CVE-2023-20198 Scanner

CVE-2023-20198 scanner - Authentication Bypass vulnerability in Cisco IOS XE

~10sSingle assetBulk scanAPI
Mar 8, 2024
critical10.0

Employee Management System SQL Injection Scanner

Detects 'SQL Injection' vulnerability in Employee Management System.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2026-48282 Scanner

CVE-2026-48282 Scanner - Path Traversal vulnerability in Adobe ColdFusion

~60sSingle assetBulk scanAPI
Jul 8, 2026
critical10.0

CVE-2023-40044 Scanner

CVE-2023-40044 Scanner - Deserialization of Untrusted Data vulnerability in WS_FTP Server

~10sSingle assetBulk scanAPI
Oct 23, 2025
critical10.0

CVE-2025-47916 Scanner

CVE-2025-47916 Scanner - Remote Code Execution (RCE) vulnerability in Invision Community

~10sSingle assetBulk scanAPI
May 26, 2025
critical10.0

PbootCMS Database File Exposure SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in PbootCMS involving unauthorized access to the pbootcms.db file. Identifies exposure of the SQLite database that may reveal sensitive application data.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Okta Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Okta.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Symantec Endpoint Protection Manager Remote Code Execution Scanner

Detects 'Remote Code Execution' vulnerability in Symantec Endpoint Protection Manager.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Mirai Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Mirai. The vulnerability allows potential threat actors to execute arbitrary commands via unsanitized parameters in the CGI login script.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Joomla! CMS Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Joomla! CMS affecting versions <=3.4.6.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

DedeCMS SQL Injection Vulnerability Scanner

Detects 'SQL Injection (SQLi)' vulnerability in DedeCMS

~10sSingle assetBulk scanAPI
Mar 16, 2024
critical10.0

CVE-2024-1709 Scanner

Detects 'Authentication Bypass' vulnerability in ConnectWise ScreenConnect affects v. 23.9.7 and prior.

~10sSingle assetBulk scanAPI
Apr 30, 2024
critical10.0

CVE-2024-42640 Scanner

CVE-2024-42640 scanner - Remote Code Execution (RCE) vulnerability in Angular Base64 Upload

~10sSingle assetBulk scanAPI
Nov 20, 2024
critical10.0

Cisco BroadWorks Log4j Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (Apache Log4j)' vulnerability in Cisco BroadWorks

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

ThinkCMF Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in ThinkCMF.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

OpenSNS Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in OpenSNS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

JamF Pro Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in JamF Pro.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Seeyon OA Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Seeyon OA.

~10sSingle assetBulk scan
Oct 8, 2024
critical10.0

CVE-2022-25226 Scanner

CVE-2022-25226 Scanner - Authentication Bypass vulnerability in ThinVNC

~10sSingle assetBulk scanAPI
Feb 17, 2025
critical10.0

CVE-2021-22205 Scanner

CVE-2021-22205 scanner - Remote Code Execution (RCE) vulnerability in GitLab

~10sSingle assetBulk scanAPI
Dec 10, 2021
critical10.0

Maccmsv10 Backdoor Remote Code Execution Vulnerability Scanner

Detects 'Backdoor Remote Code Execution' vulnerability in Maccmsv10

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

CVE-2026-21858 Scanner (Version Based)

CVE-2026-21858 Scanner - Remote Code Execution vulnerability in n8n

~10sSingle assetBulk scanAPI
Jan 9, 2026
critical10.0

CVE-2025-52665 Scanner

CVE-2025-52665 Scanner - Remote Code Execution (RCE) vulnerability in UniFi Access

~10sSingle assetBulk scan
Nov 5, 2025
critical10.0

Cisco Unified Communications Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Cisco Unified Communications

~10sSingle assetBulk scan
Mar 10, 2024
critical10.0

CVE-2014-8877 Scanner

Detects 'Code Injection' vulnerability in CreativeMinds CM Downloads Manager plugin for Wordpress affects v. before 2.0.4.

~15sSingle assetBulk scanAPI
Jun 19, 2021
critical10.0

Fastjson 1.2.42 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.42

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CVE-2025-55182 Scanner

CVE-2025-55182 Scanner - Remote Code Execution (RCE) vulnerability in React Server Components and Next.js

~10sSingle assetBulk scanAPI
Dec 4, 2025
critical10.0

Fastjson 1.2.62 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.62

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

DedeCMS 5.8.1-beta Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in DedeCMS v5.8.1-beta

~10sSingle assetBulk scanAPI
Mar 16, 2024
critical10.0

Fastjson 1.2.67 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.67

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

Sonicwall SSLVPN Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Sonicwall SSLVPN.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2021-44228 Scanner

CVE-2021-44228 scanner - Remote Code Execution (RCE) vulnerability in Apache Log4j2

~10sSingle assetBulk scanAPI
Dec 11, 2021
critical10.0

Fastjson 1.2.68 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.68

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

Fastjson 1.2.43 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.43

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CVE-2024-30502 Scanner

CVE-2024-30502 Scanner - SQL Injection vulnerability in WP Travel Engine

~10sSingle assetBulk scanAPI
Mar 12, 2026
critical10.0

Sponip Network System Remote Code Execution Scanner

Detects 'Remote Code Execution' vulnerability in Sponip Network System.

~10sSingle assetBulk scanAPI
Oct 8, 2024

Run all Product CVEs (Web) checks at once.

S4E covers 6,037+ scanners in this category with continuous monitoring and full remediation guidance.

Start Free Scan →