Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium5.3YOURLS is a self-hosted, customizable URL shortener written in PHP.CVE-2026-62858 · CVE.org · NIST NVDOct 14, 2026
High8.1The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the ' _type (e.g.CVE-2026-104909 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.0%Oct 14, 2026
High8.1The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_…CVE-2026-103367 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.0%Oct 14, 2026
High8.1The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the cl…CVE-2026-104995 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.9%Oct 13, 2026
High8.1WordPress Core Remote File Inclusion VulnerabilityCVE-2026-87902 · WordPress · Core · CISA KEV · CVE.org · FIRST EPSS · wordpressKEVEPSS 40.0%Sep 22, 2026
High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityCVE-2025-68645 · Synacor · Zimbra Collaboration Suite (ZCS) · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 48.9%Dec 22, 2025