Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…EPSS 0.3%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Le…EPSS 0.3%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.s…EPSS 0.3%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: fro…EPSS 0.3%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows Exploiting Incorrectly Configured Access Control Security L…EPSS 0.3%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…EPSS 0.3%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a…EPSS 0.3%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directo…EPSS 0.3%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…EPSS 0.2%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Sec…EPSS 0.3%Apr 8, 2026
- Medium5.4Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…EPSS 0.2%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…EPSS 0.3%Apr 8, 2026
- Medium6.5Missing Authorization vulnerability in SureCart SureCart surecart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureCart:…EPSS 0.3%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in embedplus Youtube Embed Plus youtube-embed-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…EPSS 0.3%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…EPSS 0.2%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…EPSS 0.3%Apr 8, 2026
- Medium6.5The WP Blockade plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 0.9.14.EPSS 0.5%Apr 8, 2026
- Medium5.3The PZ Frontend Manager plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.6.EPSS 0.4%Apr 8, 2026
- Medium5.3The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6.EPSS 0.4%Apr 8, 2026
- Critical9.8The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15.KEVEPSS 1.3%Apr 8, 2026
- Medium5.3The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to Missing Authorization via the plugin's webhook handler in all versions up to, and i…EPSS 0.7%Apr 8, 2026
- Medium5.3The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check…EPSS 0.4%Apr 8, 2026
- Low2.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an…EPSS 0.4%Apr 8, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstanc…EPSS 0.3%Apr 8, 2026
- Medium5.4The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider…EPSS 0.3%Apr 7, 2026