Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form…Check if you run itEPSS 0.27%Mar 13, 2026
- Medium5.4Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textm…Check if you run itEPSS 0.29%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.Th…Check if you run itEPSS 0.30%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Confi…Check if you run itEPSS 0.28%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.…Check if you run itEPSS 0.27%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome:…Check if you run itEPSS 0.27%Mar 13, 2026
- High7.5The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28.Check if you run itEPSS 0.53%Mar 13, 2026
- High8.7wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the ch…Check if you run itEPSS 0.54%Mar 13, 2026
- Medium5.3Uptime Kuma is an open source, self-hosted monitoring tool.Check if you run itEPSS 0.86%Mar 12, 2026
- Medium6.9A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information thro…Check if you run itEPSS 0.43%Mar 12, 2026
- Medium6.5A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.Check if you run itEPSS 0.53%Mar 12, 2026
- Medium4.3The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment st…Check if you run itEPSS 0.17%Mar 12, 2026
- Medium5.3A security vulnerability has been detected in projectsend up to r1945.Check if you run itEPSS 0.38%Mar 12, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized email notification triggering due to missing capability checks on all 10 funct…Check if you run itEPSS 0.35%Mar 12, 2026
- High7.7ZITADEL is an open source identity management platform.Check if you run itEPSS 0.42%Mar 11, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.50%Mar 11, 2026
- Medium4.3OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.35%Mar 11, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authe…Check if you run itEPSS 0.26%Mar 11, 2026
- Medium4.3WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1.Check if you run itEPSS 0.41%Mar 11, 2026
- Critical9.3MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials.Check if you run itEPSS 1.00%Mar 11, 2026
- Medium6.5The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 4.11.1.Check if you run itEPSS 0.28%Mar 11, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an au…Check if you run itEPSS 0.24%Mar 11, 2026
- High7.2Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.48%Mar 10, 2026
- Medium6.9Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.32%Mar 10, 2026
- High8.8Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.62%Mar 10, 2026