S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
5,996 tools·Free, no account required

Product CVE Scanners (Web)

When a CVE is published for a popular web product, attackers scan the internet within hours. These product-specific scanners let you check whether your WordPress plugins, CMS, or web framework is vulnerable before exploitation happens.

By the numbers
6k
Product CVEs (Web) scanners
in this category
16.5M
Automated runs
scans executed here
373.2k
Assets scanned
verified across S4E
NewestCVE-2026-30849 Scanner→
Run Full Scan →← All categories
Web VulnerabilitiesNetwork VulnerabilitiesMisconfigurationInformation ScansExposed PanelsProduct CVEs (Network)DNS ControlsSSL Controls
Featured in this category

Important Product CVEs (Web) Scanners

Browse all 5,996 tools →
critical10.0

WordPress Plugin Vulnerabilities Scanner

Detects vulnerabilities in WordPress plugins that can expose websites to serious security risks. Identifies common plugin flaws such as Remote Code Execution (RCE), SQL injection, and insecure file handling.

~300sSingle assetBulk scanAPI
May 12, 2025
critical10.0

Apache OFBiz Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Apache OFBiz affects v. prior to 8.12.03. This scanner helps in identifying potential RCE flaws associated with the Apache Log4j library in Apache OFBiz.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical9.0

CVE-2021-45046 Scanner (Version Based)

CVE-2021-45046 Scanner (Version Based) - Remote Code Execution (RCE) vulnerability in Apache Log4j2

~10sSingle assetBulk scanAPI
Nov 8, 2025
critical10.0

Apache Druid Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Apache Druid.

~10sSingle assetBulk scanAPI
Oct 12, 2025
critical9.8

Ingress NGINX Admission Controller Exposure Detection Scanner

Detects publicly exposed Ingress NGINX admission controller endpoints through TLS certificate analysis. External exposure of this webhook is a critical misconfiguration that allows unauthenticated attackers to inject malicious configurations, potentially leading to Kubernetes cluster compromise.

~10sSingle assetBulk scanAPI
Mar 25, 2025
high7.2

WordPress WooCommerce Google Shopping Cross-Site Scripting Scanner

Targets the search GET parameter in WooCommerce Google Shopping plugin versions < 1.2.4, allowing attackers to inject malicious scripts.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical9.0

WordPress Zero Spam SQL Injection Scanner

Detects 'SQL Injection' vulnerability in WordPress Zero Spam affecting versions <= 2.1.1.

~60sSingle assetBulk scanAPI
Oct 8, 2024
high7.5

WordPress WP Statistics Plugin SQL Injection Scanner

Detects 'SQL Injection' vulnerability in WordPress WP Statistics Plugin affects v. 13.0.7.

~60sSingle assetBulk scanAPI
Oct 8, 2024
high8.6

WordPress Hide Security Enhancer Local File Inclusion Scanner

Detects 'Local File Inclusion (LFI)' vulnerability in WordPress Hide Security Enhancer affects v. 1.3.9.2 or less.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CNVD-2021-09650 Scanner

Detects 'Remote Code Execution' vulnerability in Ruijie EWEB Network Management System.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

ECTouch SQL Injection Scanner

Targets user input parameters in ECTouch 2's mobile commerce modules, allowing attackers to execute arbitrary SQL queries and extract sensitive database contents.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

GoAnywhere Managed File Transfer Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in GoAnywhere Managed File Transfer.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CNVD-2021-26422 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in eYouMail.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Cisco CloudCenter Suite Log4j Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (Apache Log4j)' vulnerability in Cisco CloudCenter Suite

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

CNVD-2021-30167 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in UFIDA NC.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Duomi CMS SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in Duomi CMS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

JamF Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in JamF. The scanner identifies weaknesses related to the JNDI features in Apache Log4j2.

~10sSingle assetBulk scan
Oct 8, 2024
critical10.0

Graylog Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Graylog.

~10sSingle assetBulk scan
Oct 8, 2024
critical10.0

Fastjson 1.2.41 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.41

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CNVD-2020-46552 Scanner

Detects 'Remote Code Execution' vulnerability in Sangfor EDR.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

YesWiki SQL Injection Scanner

Detects 'SQL Injection' vulnerability in YesWiki affects v. <2022-07-07. This scanner identifies potential SQL injection flaws that could compromise data integrity and access control.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2025-34028 Scanner

CVE-2025-34028 Scanner - Path Traversal vulnerability in Commvault Command Center

~60sSingle assetBulk scanAPI
Apr 27, 2025
critical10.0

CVE-2024-20419 Scanner

CVE-2024-20419 Scanner - Account Takeover vulnerability in Cisco SSM On-Prem

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Okta Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Okta.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2025-49132 Scanner

CVE-2025-49132 Scanner - Remote Code Execution vulnerability in Pterodactyl Panel

~10sSingle assetBulk scanAPI
Jun 21, 2025
critical10.0

OpenShift Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution' vulnerability in OpenShift.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

TamronOS Remote Code Execution Scanner

Detects 'Remote Code Execution' vulnerability in TamronOS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2024-42640 Scanner

CVE-2024-42640 scanner - Remote Code Execution (RCE) vulnerability in Angular Base64 Upload

~10sSingle assetBulk scanAPI
Nov 20, 2024
critical10.0

CVE-2020-11455 Scanner

CVE-2020-11455 scanner - Path Traversal vulnerability in LimeSurvey

~10sSingle assetBulk scanAPI
Jan 18, 2022
critical10.0

CVE-2025-47916 Scanner

CVE-2025-47916 Scanner - Remote Code Execution (RCE) vulnerability in Invision Community

~10sSingle assetBulk scanAPI
May 26, 2025
critical10.0

Sponip Network System Remote Code Execution Scanner

Detects 'Remote Code Execution' vulnerability in Sponip Network System.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

PbootCMS Database File Exposure SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in PbootCMS involving unauthorized access to the pbootcms.db file. Identifies exposure of the SQLite database that may reveal sensitive application data.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Jenkins Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Jenkins. This scanner identifies remote code execution flaws, assessing Jenkins for potential exploit routes in its script functionality.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2026-53753 Scanner

CVE-2026-53753 Scanner - Remote Code Execution vulnerability in Crawl4AI

~10sSingle assetBulk scanAPI
Aug 18, 2026
critical10.0

Cisco BroadWorks Log4j Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (Apache Log4j)' vulnerability in Cisco BroadWorks

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

Cisco WebEx Log4j Remote Code Execution Vulnerability Scanner

Cisco WebEx Log4j RCE Vulnerability Detection

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

CVE-2024-32640 Scanner

CVE-2024-32640 scanner - SQL Injection vulnerability in Mura/Masa CMS

~10sSingle assetBulk scanAPI
May 26, 2024
critical10.0

Cisco Unified Communications Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Cisco Unified Communications

~10sSingle assetBulk scan
Mar 10, 2024
critical10.0

Chamilo SQL Injection Scanner

Detects 'SQL Injection' vulnerability in Chamilo.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2024-30502 Scanner

CVE-2024-30502 Scanner - SQL Injection vulnerability in WP Travel Engine

~10sSingle assetBulk scanAPI
Mar 12, 2026
critical10.0

Spark Unauthorized Admin Access Scanner

Detects 'Unauthenticated Admin Access' vulnerability in Spark.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2025-32432 Scanner

CVE-2025-32432 Scanner - Remote Code Execution (RCE) vulnerability in CraftCMS

~10sSingle assetBulk scanAPI
Apr 29, 2025
critical10.0

CVE-2025-26319 Scanner

CVE-2025-26319 Scanner - Arbitrary File Upload vulnerability in Flowise

~10sSingle assetBulk scanAPI
Mar 12, 2025
critical10.0

CVE-2025-20282 Scanner

CVE-2025-20282 Scanner - Unrestricted File Upload vulnerability in Cisco Identity Services Engine

~10sSingle assetBulk scanAPI
Aug 4, 2026
critical10.0

CVE-2022-25226 Scanner

CVE-2022-25226 Scanner - Authentication Bypass vulnerability in ThinVNC

~10sSingle assetBulk scanAPI
Feb 17, 2025
critical10.0

Seeyon OA Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Seeyon OA.

~10sSingle assetBulk scan
Oct 8, 2024
critical10.0

Netgear WNR1000v3 Credential Harvesting Vulnerability Scanner

A vulnerability has been discovered in WNR 1000 series that allows an attacker to retrieve administrator credentials with the router interface.

~15sSingle assetBulk scanAPI
Jun 18, 2021
critical10.0

Nacos 1.x Authentication Bypass Vulnerability Scanner

Detect a critical authentication bypass vulnerability in Nacos 1.x, which could allow unauthorized access and manipulation of application data, including adding new users without authentication.

~5sSingle assetBulk scanAPI
Jun 4, 2021
critical10.0

Fastjson 1.2.62 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.62

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

DedeCMS 5.8.1-beta Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in DedeCMS v5.8.1-beta

~10sSingle assetBulk scanAPI
Mar 16, 2024
critical10.0

Fastjson 1.2.67 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.67

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CVE-2024-1709 Scanner

Detects 'Authentication Bypass' vulnerability in ConnectWise ScreenConnect affects v. 23.9.7 and prior.

~10sSingle assetBulk scanAPI
Apr 30, 2024
critical10.0

Fastjson 1.2.43 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.43

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CVE-2018-9206 Scanner

Detects 'Unrestricted File Upload' vulnerability in blueimp/jQuery-File-Upload affects v. 9.22.0 and before.

~5sSingle assetBulk scanAPI
Jun 29, 2021
critical10.0

CVE-2021-44228 Scanner

CVE-2021-44228 scanner - Remote Code Execution (RCE) vulnerability in Apache Log4j2

~10sSingle assetBulk scanAPI
Dec 11, 2021
critical10.0

CVE-2025-55182 Scanner

CVE-2025-55182 Scanner - Remote Code Execution (RCE) vulnerability in React Server Components and Next.js

~10sSingle assetBulk scanAPI
Dec 4, 2025
critical10.0

CVE-2026-48282 Scanner

CVE-2026-48282 Scanner - Path Traversal vulnerability in Adobe ColdFusion

~60sSingle assetBulk scanAPI
Jul 8, 2026
critical10.0

Fastjson 1.2.68 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.68

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

ThinkCMF Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in ThinkCMF.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

AntSword Backdoor Detection Vulnerability Scanner

Detects 'Backdoor' vulnerability in AntSword.

~10sSingle assetBulk scanAPI
Mar 10, 2024
See all 5,996 Product CVEs (Web) scanners →

Run all Product CVEs (Web) checks at once.

S4E covers 5,996+ scanners in this category with continuous monitoring and full remediation guidance.

Start Free Scan →