Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.Check if you run itEPSS 0.25%Dec 10, 2025
- Medium4.3Missing Authorization vulnerability in WebToffee WebToffee eCommerce Marketing Automation decorator-woocommerce-email-customizer allows Exploiting Incorrectly Configur…Check if you run itEPSS 0.21%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.18%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunne…Check if you run itEPSS 0.25%Dec 9, 2025
- Medium5.4Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting Incorrectly Confi…Check if you run itEPSS 0.25%Dec 9, 2025
- Medium6.5Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…Check if you run itEPSS 0.27%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Lev…Check if you run itEPSS 0.28%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio S…Check if you run itEPSS 0.22%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in paysera WooCommerce Payment Gateway - Paysera woo-payment-gateway-paysera allows Exploiting Incorrectly Configured Access Contro…Check if you run itEPSS 0.22%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…Check if you run itEPSS 0.25%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through <= 1.0.5.Check if you run itEPSS 0.36%Dec 9, 2025
- Medium5.3The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3.Open the advisoryDec 5, 2025
- Medium5.3The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_update_order_status' AJAX e…Open the advisoryDec 5, 2025
- Medium4.3The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_frontend_save' AJAX endp…Open the advisoryDec 5, 2025
- Medium5.3The Voidek Employee Portal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, a…Open the advisoryDec 5, 2025
- Medium5.3The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handle_export' function in a…Open the advisoryDec 5, 2025
- Medium4.3The Takeads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.13.Open the advisoryDec 5, 2025
- Medium4.8The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0.Open the advisoryDec 4, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4.Open the advisoryDec 4, 2025
- Medium4.3The Fluent Booking plugin for WordPress is vulnerable to unauthorized calendar import and management due to a missing capability check on the "importCalendar" function…Open the advisoryDec 3, 2025
- Medium4.3The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.40.1.Open the advisoryDec 3, 2025
- Medium5.4The Post SMTP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.1.Open the advisoryDec 3, 2025
- Medium5.3A fix was made in BlazeMeter Jenkins Plugin version 4.27 to allow users only with certain permissions to see the list of available resources like credential IDs, bzm w…Open the advisoryDec 3, 2025
- Medium5.3The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability…Open the advisoryDec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025