Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6.Vuln · CVE-2026-4484 · CVE.org · NIST NVD · WordPressMar 26, 2026
High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Vuln · CVE-2026-34053 · open-emr · openemr · CVE.org · FIRST EPSS · NIST NVDEPSS 0.6%Mar 26, 2026
Medium4.3OpenEMR is a free and open source electronic health records and medical practice management application.Vuln · CVE-2026-33934 · open-emr · openemr · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 26, 2026
High8.8OpenEMR is a free and open source electronic health records and medical practice management application.Vuln · CVE-2026-33918 · open-emr · openemr · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 26, 2026
Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Vuln · CVE-2026-33915 · open-emr · openemr · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 26, 2026
High7.5Missing Authorization vulnerability in StellarWP Restrict Content restrict-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…Vuln · CVE-2026-32546 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Premmerce Premmerce Redirect Manager premmerce-redirect-manager allows Exploiting Incorrectly Configured Access Control Security…Vuln · CVE-2026-32541 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-insightly allows Exploiting Incorr…Vuln · CVE-2026-32527 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mi…Vuln · CVE-2026-32515 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Anton Voytenko Petitioner petitioner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…Vuln · CVE-2026-32514 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.1Missing Authorization vulnerability in wp-configurator WP Configurator Pro wp-configurator-pro allows Exploiting Incorrectly Configured Access Control Security Levels.…Vuln · CVE-2026-32501 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Ac…Vuln · CVE-2026-32498 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
High7.5Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…Vuln · CVE-2026-32495 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in bPlugins B Blocks b-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Blocks:…Vuln · CVE-2026-32489 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…Vuln · CVE-2026-32485 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This…Vuln · CVE-2026-32483 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.7Missing Authorization vulnerability in WebToffee Comments Import & Export comments-import-export-woocommerce allows Exploiting Incorrectly Configured Access Control Se…Vuln · CVE-2026-32441 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.4%Mar 25, 2026
High8.2Missing Authorization vulnerability in Devteam HaywoodTech Product Rearrange for WooCommerce products-rearrange-woocommerce allows Exploiting Incorrectly Configured Ac…Vuln · CVE-2026-31921 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.4%Mar 25, 2026
Critical9.1Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from…Vuln · CVE-2026-27071 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Kaira StoreCustomizer woocustomizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S…Vuln · CVE-2026-27046 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in ViaBill for WooCommerce ViaBill – WooCommerce viabill-woocommerce allows Exploiting Incorrectly Configured Access Control Securi…Vuln · CVE-2026-25469 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in avalex avalex avalex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects avalex: from n/a…Vuln · CVE-2026-25462 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.3Missing Authorization vulnerability in LiquidThemes Ave Core ave-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ave Co…Vuln · CVE-2026-25460 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.3Missing Authorization vulnerability in Aarsiv Groups Automated FedEx live/manual rates with shipping labels a2z-fedex-shipping allows Exploiting Incorrectly Configured…Vuln · CVE-2026-25456 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5pickplugins product_slider_for_woocommerce Missing AuthorizationVuln · CVE-2026-25455 · pickplugins · product_slider_for_woocommerce · CVE.org · FIRST EPSS · NIST NVD · WordPressKEVEPSS 0.3%Mar 25, 2026