Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare-products allows Exploiting Incorrectly Configured Access Control S…EPSS 0.3%Apr 15, 2026
- High8.8The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3.EPSS 0.5%Apr 15, 2026
- Medium4.3The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.15.1.EPSS 0.3%Apr 15, 2026
- High7.1Chamilo LMS is an open-source learning management system.EPSS 0.4%Apr 14, 2026
- Medium6.5Chamilo LMS is an open-source learning management system.EPSS 0.4%Apr 14, 2026
- Medium5.4Docmost is open-source collaborative wiki and documentation software.EPSS 0.3%Apr 14, 2026
- High8.1A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrar…EPSS 0.4%Apr 14, 2026
- High8.1A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrari…EPSS 0.4%Apr 14, 2026
- High8.8A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily reset…EPSS 0.8%Apr 14, 2026
- Medium5.3MCPHub in versions below 0.11.0 is vulnerable to authentication bypass.EPSS 0.4%Apr 14, 2026
- High8.7A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).EPSS 0.5%Apr 14, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.EPSS 0.3%Apr 13, 2026
- High7.1Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by mani…EPSS 0.5%Apr 13, 2026
- Medium4.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7.EPSS 0.3%Apr 11, 2026
- Medium5.3FastGPT is an AI Agent building platform.EPSS 0.4%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.EPSS 0.4%Apr 10, 2026
- High7.1Chamilo LMS is a learning management system.EPSS 0.3%Apr 10, 2026
- High7.1Chamilo LMS is a learning management system.EPSS 0.4%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.EPSS 0.2%Apr 10, 2026
- High7.1Chamilo LMS is a learning management system.EPSS 0.3%Apr 10, 2026
- High7.1Chamilo LMS is a learning management system.EPSS 0.4%Apr 10, 2026
- High8.6CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list…EPSS 0.7%Apr 10, 2026
- High8.8Directus is a real-time API and App dashboard for managing SQL database content.EPSS 0.4%Apr 9, 2026
- Medium5.5A security vulnerability has been detected in decolua 9router up to 0.3.47.EPSS 0.5%Apr 9, 2026
- Medium4.3The MStore API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.18.3.EPSS 0.4%Apr 9, 2026