Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2.May 18, 2026
- High7.5The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inc…May 18, 2026
- Low1.9A vulnerability was identified in continuedev continue up to 1.2.22.EPSS 0.2%May 18, 2026
- Low2.1A vulnerability was detected in Kilo-Org kilocode up to 7.0.47.EPSS 0.6%May 17, 2026
- Medium5.5A vulnerability was found in adenhq hive up to 0.11.0.EPSS 0.6%May 17, 2026
- Medium5.5A vulnerability has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c.May 17, 2026
- Medium5.5A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c.May 17, 2026
- Low2.1A vulnerability was detected in AstrBotDevs AstrBot up to 4.23.5.May 17, 2026
- High8.7Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal s…May 17, 2026
- High8.7Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitrary files by submitting unescaped filenames thro…May 17, 2026
- Low0.9A security flaw has been discovered in Oinone Pamirs up to 7.2.0.May 17, 2026
- High8.7WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating paramet…May 16, 2026
- High8.7WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbit…May 16, 2026
- High8.7Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversi…May 16, 2026
- Critical9.8Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium5.5Microsoft APM is an open-source, community-driven dependency manager for AI agents.May 15, 2026
- High7.1Microsoft APM is an open-source, community-driven dependency manager for AI agents.May 15, 2026
- Critical9.2Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization.May 15, 2026
- Critical9.2PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization.May 15, 2026
- High7.5The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3.May 15, 2026
- High7.1OneDev is a Git server with CI/CD, kanban, and packages.May 14, 2026
- High8.6Note Mark is an open-source note-taking application.May 14, 2026
- Critical9.2Strapi is an open source headless content management system.May 14, 2026
- Critical9.1FileBrowser Quantum is a free, self-hosted, web-based file manager.May 14, 2026