Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control S…Check if you run itEPSS 0.36%Mar 5, 2026
- High7.5Missing Authorization vulnerability in vanquish WooCommerce Order Details woocommerce-order-details allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.41%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Exploiting Incorrectly Configured Access Control Securi…Check if you run itEPSS 0.34%Mar 5, 2026
- High7.5Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Contr…Check if you run itEPSS 0.45%Mar 5, 2026
- Medium5.9Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects i…Check if you run itEPSS 0.33%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: fr…Check if you run itEPSS 0.34%Mar 5, 2026
- High7.5Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.34%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.33%Mar 5, 2026
- High7.5Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Ac…Check if you run itEPSS 0.42%Mar 5, 2026
- Medium6.5The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.1.17.Check if you run itEPSS 0.37%Mar 5, 2026
- Medium4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action with in all ve…Check if you run itEPSS 0.35%Mar 4, 2026
- Medium6.5The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of d…Check if you run itEPSS 0.24%Mar 4, 2026
- Medium5.4The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewContro…Check if you run itEPSS 0.40%Mar 4, 2026
- High8.3Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass.Check if you run itEPSS 0.56%Mar 3, 2026
- Medium5.4IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.Check if you run itEPSS 0.15%Mar 3, 2026
- Low2.1Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fi…Check if you run itEPSS 0.22%Mar 3, 2026
- Medium5.3The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability c…Check if you run itEPSS 0.32%Mar 3, 2026
- High7.8In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code.Check if you run itEPSS 0.10%Mar 2, 2026
- Medium4.0In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check.Check if you run itEPSS 0.10%Mar 2, 2026
- High7.3In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check.Check if you run itEPSS 0.10%Mar 2, 2026
- High7.8In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permission check.Check if you run itEPSS 0.10%Mar 2, 2026
- High8.4In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permission check.Check if you run itEPSS 0.10%Mar 2, 2026
- Critical9.3On SimStudio version below to 0.5.74, the endpoint contains a code path that bypasses all authorization checks when provided with and parameters.Check if you run itEPSS 0.47%Mar 2, 2026
- Critical9.8On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions.Check if you run itEPSS 0.64%Mar 2, 2026
- High7.1wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment via the wpforo_sync…Check if you run itEPSS 0.40%Feb 28, 2026