Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Sign Up →
5,928 tools·Free, no account required

Product CVE Scanners (Web)

When a CVE is published for a popular web product, attackers scan the internet within hours. These product-specific scanners let you check whether your WordPress plugins, CMS, or web framework is vulnerable before exploitation happens.

By the numbers
5.9k
Product CVEs (Web) scanners
in this category
15.9M
Automated runs
scans executed here
29
Assets scanned
verified across S4E
Newestdagu <= 2.3.0 - Path Traversal via Encoded Slashes in DAG Name→
Run Full Scan →← All categories
Web VulnerabilitiesNetwork VulnerabilitiesMisconfigurationInformation ScansExposed PanelsProduct CVEs (Network)DNS ControlsSSL Controls
Featured in this category

Important Product CVEs (Web) Scanners

Browse all 5,928 tools →
critical10.0

WordPress Plugin Vulnerabilities Scanner

Detects vulnerabilities in WordPress plugins that can expose websites to serious security risks. Identifies common plugin flaws such as Remote Code Execution (RCE), SQL injection, and insecure file handling.

~300sSingle assetBulk scanAPI
May 2, 2025
critical10.0

Apache OFBiz Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Apache OFBiz affects v. prior to 8.12.03. This scanner helps in identifying potential RCE flaws associated with the Apache Log4j library in Apache OFBiz.

~10sSingle assetBulk scanAPI
Oct 8, 2024
high7.2

WordPress WooCommerce Google Shopping Cross-Site Scripting Scanner

Targets the search GET parameter in WooCommerce Google Shopping plugin versions < 1.2.4, allowing attackers to inject malicious scripts.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical9.0

WordPress Zero Spam SQL Injection Scanner

Detects 'SQL Injection' vulnerability in WordPress Zero Spam affecting versions <= 2.1.1.

~60sSingle assetBulk scanAPI
Oct 8, 2024
high7.5

WordPress WP Statistics Plugin SQL Injection Scanner

Detects 'SQL Injection' vulnerability in WordPress WP Statistics Plugin affects v. 13.0.7.

~60sSingle assetBulk scanAPI
Oct 8, 2024
high8.6

WordPress Hide Security Enhancer Local File Inclusion Scanner

Detects 'Local File Inclusion (LFI)' vulnerability in WordPress Hide Security Enhancer affects v. 1.3.9.2 or less.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CNVD-2021-09650 Scanner

Detects 'Remote Code Execution' vulnerability in Ruijie EWEB Network Management System.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

ECTouch SQL Injection Scanner

Targets user input parameters in ECTouch 2's mobile commerce modules, allowing attackers to execute arbitrary SQL queries and extract sensitive database contents.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

GoAnywhere Managed File Transfer Remote Code Execution (RCE) Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in GoAnywhere Managed File Transfer.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CNVD-2021-26422 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in eYouMail.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Cisco CloudCenter Suite Log4j Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (Apache Log4j)' vulnerability in Cisco CloudCenter Suite

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

CNVD-2021-30167 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in UFIDA NC.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Duomi CMS SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in Duomi CMS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Fastjson 1.2.41 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.41

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CNVD-2020-46552 Scanner

Detects 'Remote Code Execution' vulnerability in Sangfor EDR.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

H3c IMC Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in H3c IMC.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

OpenSNS Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in OpenSNS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Zoo Management System Authentication Bypass SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in Zoo Management System affects v. 1.0. This scanner identifies potential exploits that allow attackers to obtain sensitive database information and execute unauthorized operations.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Fastjson 1.2.68 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.68

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

ECShop SQL Injection Scanner

Detects 'SQL Injection (SQLi)' vulnerability in ECShop. This scan evaluates whether crafted Referer header payloads can trigger unsafe SQL execution, enabling unauthorized access to sensitive database content.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

SeaCMS SQL Injection Scanner

Detects 'SQL Injection' vulnerability in SeaCMS which affects v. 8.7.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2023-34960 Scanner

Detects 'OS Command Injection' vulnerability in Chamilo affects v. 1.11.* up to v1.11.18.

~10sSingle assetBulk scanAPI
Jul 31, 2023
critical10.0

CVE-2024-1061 Scanner

CVE-2024-1061 scanner - SQL Injection vulnerability in WordPress HTML5 Video Player

~10sSingle assetBulk scanAPI
May 6, 2024
critical10.0

Fastjson 1.2.24 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.24

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

Fastjson 1.2.67 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.67

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

Spring Boot H2 Database Remote Code Execution Scanner

Detects 'Remote Code Execution' vulnerability in Spring Boot H2 Database.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Dotnet CMS SQL Injection Scanner

Detects 'SQL Injection' vulnerability in Dotnet CMS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Seowon 130-SLC Router Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Seowon 130-SLC router.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Symantec Endpoint Protection Manager Remote Code Execution Scanner

Detects 'Remote Code Execution' vulnerability in Symantec Endpoint Protection Manager.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2022-22536 Scanner

Detects 'Request Smuggling' vulnerability in SAP NetWeaver, ABAP Platform, SAP Web Dispatcher and SAP Content Server affects v. SAP NetWeaver and ABAP Platform at KRNL64NUC 7.22, 7.22EXT, 7.22, KRNL64UC 8.04, 7.87, 7.86, 7.85, 7.81, 7.77, 7.53, 7.49, 8.04 and KERNEL 7.22, SAP Web Dispatcher at 7.87, 7.86, 7.22EXT, 7.85, 7.81, 7.77, 7.53 and 7.49, SAP Content Server at 7.53.

~10sSingle assetBulk scanAPI
Mar 15, 2022
critical10.0

CVE-2022-26352 Scanner

CVE-2022-26352 scanner - Unrestricted File Upload vulnerability in dotCMS

~10sSingle assetBulk scanAPI
Jul 7, 2022
critical10.0

CVE-2023-6623 Scanner

CVE-2023-6623 scanner - Local File Inclusion (LFI) vulnerability in Essential Blocks plugin for WordPress

~15sSingle assetBulk scanAPI
Jan 25, 2024
critical10.0

Cisco IOS XE Implant Detection Vulnerability Scanner

Detects 'Backdoor' vulnerability in Cisco IOS XE.

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

Apache Code42 Remote Code Execution Vulnerability Scanner

Apache Code42 Log4j Remote Code Execution Vulnerability Scanner

~10sSingle assetBulk scanAPI
Mar 16, 2024
critical10.0

DedeCMS 5.8.1-beta Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in DedeCMS v5.8.1-beta

~10sSingle assetBulk scanAPI
Mar 16, 2024
critical10.0

Fastjson 1.2.43 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.43

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

Fastjson 1.2.62 Remote Code Execution Vulnerability Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Fastjson version 1.2.62

~10sSingle assetBulk scanAPI
Mar 24, 2024
critical10.0

CNVD-2019-32204 Scanner

Detects 'Remote Code Execution' vulnerability in Fanwei e-cology affects v. <=9.0.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Email Verification for WooCommerce Missing Authorization Scanner

Detects 'Improper Authentication' vulnerability in Email Verification for WooCommerce affects v. < 1.8.2.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

ThinkCMF Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in ThinkCMF.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Hiboss Remote Code Execution Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Hiboss.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

Sponip Network System Remote Code Execution Scanner

Detects 'Remote Code Execution' vulnerability in Sponip Network System.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

ZCMS SQL Injection Scanner

Detects 'SQL Injection' vulnerability in ZCMS.

~10sSingle assetBulk scanAPI
Oct 8, 2024
critical10.0

CVE-2014-2321 Scanner

CVE-2014-2321 scanner - Improper Access Control vulnerability in ZTE F460 and F660 cable modems

~15sSingle assetBulk scanAPI
May 6, 2021
critical10.0

Kubernetes Pods API Code Execution Vulnerability Scanner

When the service port is available, anyone can execute commands inside the container.

~5sSingle assetBulk scanAPI
May 29, 2021
critical10.0

CVE-2019-16932 Scanner

CVE-2019-16932 scanner - Server-Side-Request-Forgery (SSRF) vulnerability in Visualizer plugin for WordPress

~10sSingle assetBulk scanAPI
Jun 16, 2022
critical10.0

CVE-2022-0543 Scanner

Targets the Lua scripting engine in Debian-packaged Redis, allowing an attacker to escape the sandbox and execute arbitrary system commands.

~10sSingle assetBulk scanAPI
Jun 27, 2022
critical10.0

CVE-2023-27482 Scanner

CVE-2023-27482 scanner - Authentication Bypass vulnerability in Home Assistant Core and Supervisor

~10sSingle assetBulk scanAPI
Sep 11, 2023
critical10.0

CVE-2024-0352 Scanner

CVE-2024-0352 scanner - Arbitrary File Upload vulnerability in Likeshop

~10sSingle assetBulk scanAPI
Jan 25, 2024
critical10.0

CVE-2007-3010 Scanner

CVE-2007-3010 scanner - Remote Code Execution (RCE) vulnerability in Alcatel-Lucent OmniPCX

~10sSingle assetBulk scanAPI
Feb 18, 2024
critical10.0

CVE-2015-1635 Scanner

CVE-2015-1635 scanner - Remote Code Execution vulnerability in Microsoft Windows

~10sSingle assetBulk scanAPI
Mar 7, 2024
critical10.0

PHP 8.1.0-dev Backdoor Remote Code Execution Vulnerability Scanner

Detects 'Backdoor Remote Code Execution' vulnerability in PHP 8.1.0-dev

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

Cisco WebEx Log4j Remote Code Execution Vulnerability Scanner

Cisco WebEx Log4j RCE Vulnerability Detection

~10sSingle assetBulk scanAPI
Mar 10, 2024
critical10.0

DedeCMS SQL Injection Vulnerability Scanner

Detects 'SQL Injection (SQLi)' vulnerability in DedeCMS

~10sSingle assetBulk scanAPI
Mar 16, 2024
critical10.0

Apache Flink Unauthenticated RCE Vulnerability Scanner

Apache Flink allows unauthenticated remote code execution vulnerability.

~10sSingle assetBulk scanAPI
Jun 29, 2021

Run all Product CVEs (Web) checks at once.

S4E covers 5,928+ scanners in this category with continuous monitoring and full remediation guidance.

Start Free Scan →