Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.May 20, 2026
- Medium6.5The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability.EPSS 0.3%May 20, 2026
- Medium5.0Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels.May 20, 2026
- Medium4.3Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels.May 20, 2026
- Medium6.5Missing Authorization vulnerability in Magepeople inc.May 20, 2026
- High8.8The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions…May 20, 2026
- Medium5.3Missing authorization vulnerability exists in Movable Type.May 20, 2026
- Medium5.3The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_conte…EPSS 0.2%May 20, 2026
- Medium4.3The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4.May 20, 2026
- Critical9.8Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.May 19, 2026
- High8.1CtrlPanel is open-source billing software for hosting providers.May 19, 2026
- Medium6.5CtrlPanel is open-source billing software for hosting providers.May 19, 2026
- Medium6.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6.May 19, 2026
- Low2.1Discourse is an open-source discussion platform.May 19, 2026
- High8.7Funnel Builder for WooCommerce Checkout prior to 3.15.0.3 contains a missing authorization vulnerability in the public checkout endpoint that allows unauthenticated at…May 19, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.May 19, 2026
- Medium6.0Discourse is an open-source discussion platform.May 19, 2026
- Medium5.1GLPI is a free asset and IT management software package.May 19, 2026
- High7.1AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.May 18, 2026
- Low2.1Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval whe…EPSS 0.4%May 18, 2026
- Medium5.3Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unautho…EPSS 0.3%May 18, 2026
- High7.1Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary di…EPSS 0.7%May 18, 2026
- Medium6.5Mattermost versions 11.5.x <= 11.5.1 fail to verify channel membership when processing AI-assisted message rewrites which allows an authenticated attacker to read the…EPSS 0.3%May 18, 2026
- Medium6.5Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal us…EPSS 0.4%May 18, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check the create_post channel permission during post edit operations which allows a…EPSS 0.3%May 18, 2026