Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.26%Feb 20, 2026
- High8.2Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.Th…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in aDirectory aDirectory adirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects aDir…Check if you run itEPSS 0.34%Feb 20, 2026
- High7.5Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…Check if you run itEPSS 0.30%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Level…Check if you run itEPSS 0.25%Feb 20, 2026
- Medium4.3Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.9Missing Authorization vulnerability in vertim Schedula schedula-smart-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.31%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured…Check if you run itEPSS 0.30%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Arya Dhiratara Optimize More! – Images optimize-more-images allows Exploiting Incorrectly Configured Access Control Security Lev…Check if you run itEPSS 0.28%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in uixthemes Konte konte allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Konte: from n/a…Check if you run itEPSS 0.33%Feb 20, 2026
- High7.6Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…Check if you run itEPSS 0.22%Feb 20, 2026
- Medium4.3Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.3Missing Authorization vulnerability in SecuPress SecuPress Free secupress.This issue affects SecuPress Free: from n/a through <= 2.2.5.3.Check if you run itEPSS 0.26%Feb 20, 2026
- Medium5.3Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19.Check if you run itEPSS 0.27%Feb 20, 2026
- Low2.1A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3.Check if you run itEPSS 0.36%Feb 20, 2026
- Medium6.9Frappe Learning Management System (LMS) is a learning system that helps users structure their content.Check if you run itEPSS 0.33%Feb 20, 2026
- Critical10.0Sensitive data disclosure and manipulation due to missing authorization.Check if you run itEPSS 0.48%Feb 20, 2026
- Medium4.3Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…Check if you run itEPSS 0.18%Jan 6, 2026
- Medium4.3Missing Authorization vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Exploiting Incorrectly Configured Access Control Security Level…Check if you run itEPSS 0.18%Jan 6, 2026
- Medium5.3A vulnerability was detected in PHPEMS up to 11.0.Check if you run itEPSS 0.25%Jan 1, 2026
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
- Medium5.3Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatF…Check if you run itEPSS 0.26%Dec 16, 2025
- High7.1Misskey is an open source, federated social media platform.Check if you run itEPSS 0.31%Dec 16, 2025
- Medium4.3The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userback_get_json function in all versions up t…Check if you run itEPSS 0.24%Dec 13, 2025
- Low3.7AzuraCast is a self-hosted, all-in-one web radio management suite.Check if you run itEPSS 0.25%Dec 12, 2025