Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.9Discourse is an open-source discussion platform.EPSS 0.4%Mar 19, 2026
- Medium5.3Discourse is an open-source discussion platform.EPSS 1.0%Mar 19, 2026
- Medium6.5Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, proc…EPSS 0.3%Mar 19, 2026
- High7.5Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting I…EPSS 0.4%Mar 19, 2026
- Medium5.3The Instant Popup Builder plugin for WordPress is vulnerable to Unauthenticated Arbitrary Shortcode Execution in all versions up to and including 1.1.7.EPSS 0.5%Mar 19, 2026
- High7.5Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Level…EPSS 0.2%Mar 19, 2026
- Medium6.3Missing Authorization vulnerability in UiPress UiPress lite uipress-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UiP…EPSS 0.3%Mar 19, 2026
- Medium5.3Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMem…EPSS 0.3%Mar 19, 2026
- Medium4.3The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis.EPSS 0.3%Mar 18, 2026
- High8.2The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the REST API endpoin…EPSS 0.4%Mar 18, 2026
- Medium5.3The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all versions up to, and incl…EPSS 0.4%Mar 18, 2026
- Medium5.3Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.T…EPSS 0.3%Mar 18, 2026
- Medium5.4The Yoast Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clone_bulk_action_handler() a…EPSS 0.2%Mar 18, 2026
- High8.7The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS.EPSS 0.5%Mar 18, 2026
- Medium5.3The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all vers…EPSS 0.3%Mar 18, 2026
- High8.3Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass rol…EPSS 0.4%Mar 17, 2026
- High8.1Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated…EPSS 0.7%Mar 17, 2026
- Low2.3The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.EPSS 0.3%Mar 17, 2026
- Medium5.3Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…EPSS 0.4%Mar 17, 2026
- Medium5.3The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including…EPSS 0.2%Mar 17, 2026
- Medium5.4Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP…EPSS 0.3%Mar 16, 2026
- Medium5.3Missing Authorization vulnerability in Webnus Inc.EPSS 0.8%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass a…EPSS 0.2%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed te…EPSS 0.2%Mar 16, 2026
- Medium5.3The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification…EPSS 0.2%Mar 16, 2026