Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057.May 2, 2026
- Low2.1A security flaw has been discovered in JeecgBoot up to 3.9.1.May 2, 2026
- High7.2The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1…May 2, 2026
- Medium4.4The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme.May 2, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.1.May 2, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.1.May 2, 2026
- High7.2Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API.May 1, 2026
- Medium6.5IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF).Apr 30, 2026
- Medium5.0A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authenticated attackers to scan internal resources…Apr 30, 2026
- Medium4.3A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a…Apr 30, 2026
- Medium6.5A Server-Side Request Forgery (SSRF) in the /themes/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a c…Apr 30, 2026
- Medium4.3A Server-Side Request Forgery (SSRF) in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafte…Apr 30, 2026
- Medium5.4A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a craft…Apr 30, 2026
- Medium5.5A vulnerability was found in Algovate xhs-mcp 0.8.11.Apr 29, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request Forgery.This issue affects Share This Image: fro…Apr 29, 2026
- Medium4.3Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.Apr 29, 2026
- Low2.1A weakness has been identified in Xuxueli xxl-job up to 3.3.2.Apr 28, 2026
- Low2.1A weakness has been identified in o2oa up to 10.0.Apr 28, 2026
- Medium4.8OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks.Apr 28, 2026
- Medium5.1OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in QQ Bot media download paths that bypass SSRF protection.Apr 28, 2026
- Medium4.8OpenClaw before 2026.4.8 contains a server-side request forgery policy bypass vulnerability allowing attackers to trigger navigations bypassing normal SSRF checks.Apr 28, 2026
- Medium6.3NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplyi…Apr 28, 2026
- Medium5.5A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63.Apr 28, 2026
- Medium5.5A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0.Apr 28, 2026
- Medium5.5A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1.Apr 27, 2026