Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.1The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due t…May 7, 2026
- Medium4.5Admidio is an open-source user management solution.May 7, 2026
- Medium6.5Admidio is an open-source user management solution.May 7, 2026
- Critical9.4CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.May 7, 2026
- Critical9.4CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.May 7, 2026
- Critical9.1Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.May 7, 2026
- Critical9.4OpenMRS Core is an open source electronic medical record system platform.May 6, 2026
- Critical9.3NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromis…May 6, 2026
- Medium6.5FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allowing an u…May 6, 2026
- Medium4.9The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1.May 6, 2026
- Medium6.1Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects.May 6, 2026
- High8.2OpenMRS Core is an open source electronic medical record system platform.May 5, 2026
- High7.6Jupyter Server is the backend for Jupyter web applications.May 5, 2026
- Critical10.0In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker…May 5, 2026
- Medium6.5The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4.May 5, 2026
- High7.3Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HT…May 5, 2026
- High7.5The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 v…May 5, 2026
- Medium5.5A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8.May 5, 2026
- Medium5.5A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2.May 5, 2026
- Medium6.5The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5.May 5, 2026
- Medium4.9The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via the AJAX route.EPSS 0.6%May 5, 2026
- Medium5.5A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0.May 5, 2026
- Medium5.5A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0.May 5, 2026
- High7.5fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions.May 4, 2026
- Medium4.6PPTAgent is an agentic framework for reflective PowerPoint generation.May 4, 2026