Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Missing Authorization vulnerability in BlueGlass Interactive AG Jobs for WordPress job-postings allows Exploiting Incorrectly Configured Access Control Security Levels…EPSS 0.4%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in Ruhul Amin My Album Gallery my-album-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…EPSS 0.3%Mar 25, 2026
- High7.5Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Level…EPSS 0.3%Mar 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions…EPSS 0.3%Mar 25, 2026
- High7.1Soft Serve is a self-hostable Git server for the command line.EPSS 0.4%Mar 24, 2026
- Critical9.1Astro is a web framework.EPSS 0.5%Mar 24, 2026
- Medium4.9Craft CMS is a content management system (CMS).EPSS 0.4%Mar 24, 2026
- Low1.3Craft CMS is a content management system (CMS).EPSS 0.3%Mar 24, 2026
- Low2.7Craft CMS is a content management system (CMS).EPSS 0.4%Mar 24, 2026
- Medium6.9Craft CMS is a content management system (CMS).EPSS 0.4%Mar 24, 2026
- High8.1Vikunja is an open-source self-hosted task management platform.EPSS 0.4%Mar 24, 2026
- High7.5Langflow is a tool for building and deploying AI-powered agents and workflows.EPSS 0.6%Mar 24, 2026
- Critical9.1The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38.Mar 24, 2026
- Medium6.5The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to, and inc…EPSS 0.5%Mar 24, 2026
- Medium4.3WPGraphQL provides a GraphQL API for WordPress sites.EPSS 0.3%Mar 24, 2026
- Medium5.4The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rule…Mar 24, 2026
- Medium4.3The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() function i…Mar 23, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized deletion of quiz question answers due to a missing capability check in the del…EPSS 0.3%Mar 23, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 23, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.5%Mar 23, 2026
- Low1.3A security flaw has been discovered in kalcaddle kodbox 1.64.Mar 23, 2026
- Medium5.4passwordprotectwp password_protect_wordpress Missing AuthorizationKEVEPSS 0.2%Mar 23, 2026
- High8.8The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2.Mar 21, 2026
- Medium4.3The Speedup Optimization plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.5.9.Mar 21, 2026
- Medium5.3The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23.Mar 21, 2026