Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15.KEVEPSS 1.3%Apr 8, 2026
- Medium5.3The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to Missing Authorization via the plugin's webhook handler in all versions up to, and i…EPSS 0.7%Apr 8, 2026
- Medium5.3The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check…EPSS 0.4%Apr 8, 2026
- Low2.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an…EPSS 0.4%Apr 8, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstanc…EPSS 0.3%Apr 8, 2026
- Medium5.4The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider…EPSS 0.3%Apr 7, 2026
- Medium5.3Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.EPSS 0.3%Apr 7, 2026
- Critical9.8@delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder.EPSS 0.6%Apr 7, 2026
- Medium5.3RustFS is a distributed object storage system built in Rust.EPSS 0.3%Apr 7, 2026
- High8.8Genealogy is a family tree PHP application.EPSS 0.4%Apr 7, 2026
- Medium6.9Frappe is a full-stack web application framework.EPSS 0.4%Apr 7, 2026
- Medium5.3OrangeHRM is a comprehensive human resource management (HRM) system.EPSS 0.3%Apr 7, 2026
- Medium6.9OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the task polling endpoints that allows unauthorized attackers to enumerate or retri…EPSS 0.4%Apr 7, 2026
- Medium5.3File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.EPSS 0.4%Apr 7, 2026
- High8.7Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation a…EPSS 2.6%Apr 7, 2026
- Medium5.3The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0.EPSS 0.6%Apr 7, 2026
- Low2.7An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.Apr 7, 2026
- Critical9.8An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.Apr 7, 2026
- Medium5.3MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts.EPSS 0.4%Apr 7, 2026
- Medium5.4Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: from…EPSS 0.3%Apr 7, 2026
- Medium5.3Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide Express Edition allows Exploiting Incorrectly Configured Access Control Securi…EPSS 0.3%Apr 7, 2026
- Low3.7WWBN AVideo is an open source video platform.EPSS 0.3%Apr 6, 2026
- High8.8Brave CMS is an open-source CMS.EPSS 0.5%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.3%Apr 6, 2026
- High7.2Ajenti is a Linux and BSD modular server admin panel.EPSS 0.4%Apr 6, 2026