Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.8.4.May 13, 2026
- Medium4.3The RTMKit Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the save_widget() and reset…May 13, 2026
- Medium5.3The Hostinger Reach – AI-Powered Email Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec…May 13, 2026
- Medium5.4The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 8.9.0.May 13, 2026
- Medium5.3The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference (IDOR) in all versions up to,…EPSS 0.2%May 13, 2026
- High7.1The MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) plugin for WordPress is vulnerable to unauthorized access and modification of…May 12, 2026
- High7.1Craft CMS is a content management system (CMS).May 12, 2026
- High7.1Craft CMS is a content management system (CMS).May 12, 2026
- Medium4.3Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attacker to modify or delete arbitrary user notificati…May 12, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.May 12, 2026
- High8.3Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.May 12, 2026
- Medium5.3The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories).May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}).May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint.May 12, 2026
- Critical9.1The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint.May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).May 12, 2026
- Critical9.8A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSand…May 12, 2026
- Medium4.3Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional permissions to obtain OTP secret keys a…May 12, 2026
- Medium5.3Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels.May 12, 2026
- Medium5.3Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security…May 12, 2026
- Medium5.4Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…May 12, 2026
- Medium4.3The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Payment Bypass via insecure user meta update in all versions up to, and includi…EPSS 0.2%May 12, 2026
- Medium4.3The Forms Rb plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9.May 12, 2026
- Medium4.3The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2.May 12, 2026
- Medium5.3The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.3.May 12, 2026