Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.Check if you run itEPSS 0.11%Feb 25, 2026
- Medium4.3The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8.Check if you run itEPSS 0.22%Feb 25, 2026
- High7.5The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure au…Check if you run itEPSS 0.37%Feb 25, 2026
- Critical9.3Parse Dashboard is a standalone dashboard for managing Parse Server apps.Check if you run itEPSS 0.39%Feb 25, 2026
- High8.8OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.34%Feb 25, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.28%Feb 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized usCheck if you run itEPSS 0.20%Feb 25, 2026
- High8.8Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability.Check if you run itEPSS 0.41%Feb 24, 2026
- Medium4.8Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.44%Feb 24, 2026
- Medium4.8The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on…Check if you run itEPSS 0.24%Feb 21, 2026
- Low2.3OpenClaw is a personal AI assistant.Check if you run itEPSS 0.34%Feb 21, 2026
- Medium6.5The weMail - Email Marketing, Lead Generation, Optin Forms, Email Newsletters, A/B Testing, and Automation plugin for WordPress is vulnerable to unauthorized form dele…Check if you run itEPSS 0.28%Feb 21, 2026
- Critical9.3ERP is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.45%Feb 21, 2026
- Critical9.8GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability.Check if you run itEPSS 0.70%Feb 20, 2026
- Critical9.8GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability.Check if you run itEPSS 0.68%Feb 20, 2026
- Medium5.3Kargo manages and automates the promotion of software artifacts.Check if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configure…Check if you run itEPSS 0.21%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscrib…Check if you run itEPSS 0.18%Feb 20, 2026
- High7.5Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…Check if you run itEPSS 0.26%Feb 20, 2026
- High7.5Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…Check if you run itEPSS 0.30%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Exploiting Incorrectly Confi…Check if you run itEPSS 0.26%Feb 20, 2026
- High7.5Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exzo: from n/a through <= 1.2.4.Check if you run itEPSS 0.30%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cli…Check if you run itEPSS 0.26%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in AgniHD Cartify - WooCommerce Gutenberg WordPress Theme cartify allows Exploiting Incorrectly Configured Access Control Security…Check if you run itEPSS 0.30%Feb 20, 2026
- High7.1Missing Authorization vulnerability in vanquish WooCommerce Bulk Product Editor woocommerce-quick-product-editor allows Exploiting Incorrectly Configured Access Contro…Check if you run itEPSS 0.24%Feb 20, 2026