Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2 due to missing validation on a user con…Check if you run itEPSS 0.24%Mar 13, 2026
- Medium4.3The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions u…Check if you run itEPSS 0.22%Mar 13, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.27%Mar 12, 2026
- High7.7ZITADEL is an open source identity management platform.Check if you run itEPSS 0.42%Mar 11, 2026
- Critical9.9Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.Check if you run itEPSS 0.86%Mar 11, 2026
- Medium5.4StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.31%Mar 11, 2026
- High7.2StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.45%Mar 11, 2026
- High8.6PingPong is a platform for using large language models (LLMs) for teaching and learning.Check if you run itEPSS 0.54%Mar 11, 2026
- Critical9.8Taskosaur is an open source project management platform with conversational AI for task execution in-app.Check if you run itEPSS 0.70%Mar 11, 2026
- Critical9.3SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malic…Check if you run itEPSS 8.04%Mar 11, 2026
- Medium6.3Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.33%Mar 11, 2026
- High8.1An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profileCheck if you run itEPSS 0.23%Mar 11, 2026
- High8.8The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Insecure Direct Object Reference in versions 8.6.0 through 9.0.2.Check if you run itEPSS 0.64%Mar 11, 2026
- Medium6.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the AJAX action.Check if you run itEPSS 0.33%Mar 11, 2026
- Medium5.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the admin action…Check if you run itEPSS 0.33%Mar 11, 2026
- Medium6.8The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and ar…Check if you run itEPSS 0.20%Mar 11, 2026
- High8.1The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11.Check if you run itEPSS 0.52%Mar 11, 2026
- Medium5.4Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.30%Mar 10, 2026
- High7.1Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.35%Mar 10, 2026
- Medium5.3LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.29%Mar 10, 2026
- Medium5.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project t…Check if you run itEPSS 0.44%Mar 10, 2026
- High7.6Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents.Check if you run itEPSS 0.43%Mar 10, 2026
- Medium5.3OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.37%Mar 10, 2026
- High7.1StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.46%Mar 10, 2026
- High8.8StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.56%Mar 10, 2026