Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed te…EPSS 0.2%Mar 16, 2026
- Medium5.3The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification…EPSS 0.2%Mar 16, 2026
- High8.7GROWI OpenAI thread/message API endpoints do not perform authorization.EPSS 0.3%Mar 16, 2026
- Medium4.3The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the de…EPSS 0.2%Mar 16, 2026
- Medium5.3The Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing validation…EPSS 0.3%Mar 16, 2026
- Medium4.3The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the add_menu_item()…EPSS 0.3%Mar 13, 2026
- High7.5NSquared simply_schedule_appointments Missing AuthorizationKEVEPSS 0.5%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Exploiting Incorrectly Configured Access Control Security Le…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This i…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in wptravelengine Travel Booking travel-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…EPSS 0.3%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Level…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploitin…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Av…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…EPSS 0.3%Mar 13, 2026
- Medium6.5Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…EPSS 0.3%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…EPSS 0.3%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This is…EPSS 0.3%Mar 13, 2026
- Low2.7Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…EPSS 0.3%Mar 13, 2026
- Medium5.0Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a thr…EPSS 0.2%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Food: fr…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BigH…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrectly Configured Access Control Security Levels.This is…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Photography vw-photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…EPSS 0.3%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in vowelweb VW Pet Shop vw-pet-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW P…EPSS 0.3%Mar 13, 2026