Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.49%Mar 7, 2026
- High7.5Homarr is an open-source dashboard.Check if you run itEPSS 1.18%Mar 7, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message deletion due to a missing capability check on the pg…Check if you run itEPSS 0.22%Mar 7, 2026
- Medium5.3The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom_fields_controller' func…Check if you run itEPSS 0.27%Mar 7, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 12.8.3.Check if you run itEPSS 0.32%Mar 7, 2026
- Medium4.3The HUMN-1 AI Website Scanner & Human Certification by Winston AI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c…Check if you run itEPSS 0.29%Mar 7, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.51%Mar 6, 2026
- High8.8Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers.Check if you run itEPSS 0.61%Mar 6, 2026
- Medium6.9Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.54%Mar 6, 2026
- Medium4.3Missing Authorization vulnerability in Rank Math Rank Math SEO PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math…Check if you run itEPSS 0.26%Mar 6, 2026
- Medium5.7SiYuan is a personal knowledge management system.Check if you run itEPSS 0.50%Mar 6, 2026
- Critical9.8The PowerPack for LearnDash WordPress plugin before 1.3.0 does not have authorization and CRSF checks in an AJAX action, allowing unauthenticated users to update arbit…Check if you run itEPSS 0.41%Mar 6, 2026
- Medium6.9Chamilo is a learning management system.Check if you run itEPSS 0.17%Mar 6, 2026
- High7.1Sensitive information disclosure and manipulation due to insufficient authorization checks.Check if you run itEPSS 0.10%Mar 6, 2026
- High7.5OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.81%Mar 5, 2026
- Critical9.3Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config impor…Check if you run itEPSS 0.58%Mar 5, 2026
- High8.8The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulnerable to unauthorized arbitrary plugin installa…Check if you run itEPSS 0.29%Mar 5, 2026
- High8.1The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20.Check if you run itEPSS 0.36%Mar 5, 2026
- Medium4.3The Media Library Assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mla_update_compat_fields_a…Check if you run itEPSS 0.35%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff…Check if you run itEPSS 0.34%Mar 5, 2026
- High7.5Missing Authorization vulnerability in Frenify Guff guff allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Guff: from n/a through <= 1.0.1.Check if you run itEPSS 0.41%Mar 5, 2026
- Medium6.3Missing Authorization vulnerability in PixFort pixfort Core pixfort-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects pix…Check if you run itEPSS 0.27%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Co…Check if you run itEPSS 0.31%Mar 5, 2026
- High7.3Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…Check if you run itEPSS 0.31%Mar 5, 2026
- High7.5Missing Authorization vulnerability in designthemes DesignThemes Booking Manager designthemes-booking-manager allows Exploiting Incorrectly Configured Access Control S…Check if you run itEPSS 0.44%Mar 5, 2026