Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityVuln · CVE-2026-102490 · Zammad GmbH · Zammad · CISA Cybersecurity Advisories · CISA KEV · CVE.org · ZammadPatch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Vuln · CVE-2026-88996 · smub · WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.27%Sep 25, 2026
- UnknownImproper Privilege ManagementVuln · CVE-2026-18322 · supsysticcom · Smart Popup by Supsystic · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.59%Sep 24, 2026
- High8.6plex media_server External Control of File Name or PathVuln · CVE-2026-96656 · Plex · Media Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 0.82%Sep 23, 2026
- UnknownUnrestricted Upload of File with Dangerous TypeVuln · CVE-2026-75949 · cmsjunkie.com · J-BusinessDirectory extension for Joomla · CVE.org · FIRST EPSS · VulnCheck KEV · JoomlaPatch nowKEVEPSS 0.43%Sep 22, 2026
- UnknownFlowiseAI Flowise Use of Hard-coded Cryptographic KeyVuln · CVE-2026-56271 · FlowiseAI · Flowise · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 0.66%Sep 21, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityVuln · CVE-2026-87886 · Acronis · Backup · CISA KEV · CVE.org · FIRST EPSS · Acronis, cPanelPatch nowKEVEPSS 0.23%Sep 15, 2026
- Critical9.8Improper Access ControlVuln · CVE-2026-90898 · maximhq · Bifrost · CVE.org · FIRST EPSS · Nuclei TemplatesPatch nowKEVEPSS 2.31%Sep 14, 2026
- UnknownImproper Privilege ManagementVuln · CVE-2026-9055 · Melograno · Booking for Appointments and Events Calendar – Amelia · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.51%Sep 1, 2026
- Unknownpixelite events_manager Improper Privilege ManagementVuln · CVE-2026-18366 · pixelite · events_manager · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.50%Aug 31, 2026
- UnknownImproper Privilege ManagementVuln · CVE-2026-15369 · Addify · Custom User Registration Fields for WooCommerce · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.40%Aug 31, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityVuln · CVE-2026-82329 · jfrog · artifactory · CISA KEV · CVE.org · FIRST EPSS · JFrogPatch nowKEVEPSS 14.37%Aug 28, 2026
- UnknownServer-Side Request Forgery (SSRF)Vuln · CVE-2026-78003 · mailgun · Mailgun for WordPress · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.79%Aug 28, 2026
- UnknownImproper Verification of Cryptographic SignatureVuln · CVE-2026-76581 · wpmudev · WPMU DEV Dashboard · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.43%Aug 27, 2026
- UnknownWeak Password Recovery Mechanism for Forgotten PasswordVuln · CVE-2026-19632 · cozmoslabs · TranslatePress – Translate Multilingual sites with AI Translation · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 8.96%Aug 25, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Vuln · CVE-2026-16747 · Themeum · Kirki · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.37%Aug 24, 2026
- UnknownMiniOrange saml_sp_single_sign_on Incorrect Privilege AssignmentVuln · CVE-2026-61979 · MiniOrange · saml_sp_single_sign_on · CVE.org · FIRST EPSS · Patchstack Database · WordPressPatch nowKEVEPSS 0.42%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationVuln · CVE-2026-15981 · MiniOrange · saml_sp_single_sign_on · CVE.org · FIRST EPSS · Patchstack Database · WordPressPatch nowKEVEPSS 2.36%Aug 21, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationVuln · CVE-2026-19598 · sc0ttkclark · Pods – Custom Content Types and Fields · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 3.52%Aug 15, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityVuln · CVE-2026-5430 · WSO2 · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · WSO2Patch nowKEVEPSS 0.59%Aug 6, 2026
- Critical10.0Metabase SQL Injection VulnerabilityVuln · CVE-2026-72898 · metabase · metabase · CISA KEV · CVE.org · FIRST EPSS · MetabasePatch nowKEVEPSS 97.44%Aug 6, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityVuln · CVE-2026-18577 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSS · N-ablePatch nowKEVEPSS 14.62%Aug 2, 2026
- Unknownwpmanageninja ninja_tables Embedded Malicious CodeVuln · CVE-2026-73533 · WPManageNinja · Ninja Tables Pro · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodeVuln · CVE-2026-73532 · WPManageNinja · Fluent Forms Pro · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 0.67%Aug 1, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityVuln · CVE-2026-18556 · n-able · n-central · CISA KEV · CVE.org · FIRST EPSS · N-ablePatch nowKEVEPSS 7.88%Aug 1, 2026
