Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncridio listingpro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.40%May 4, 2026
- Unknownmetagauss registrationmagic Improper Privilege ManagementPatch nowKEVEPSS 1.65%May 4, 2026
- UnknownWP Go Maps AJAX Action Unathenticated Cross-Site Scripting (XSS)Patch nowKEVEPSS 1.98%May 4, 2026
- Unknownsitesao dhvc_form Incorrect Privilege AssignmentPatch nowKEVEPSS 0.55%May 4, 2026
- Unknownays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.76%May 4, 2026
- Unknownicegram icegram_express Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%May 4, 2026
- Unknownweb-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.52%May 4, 2026
- Unknownwppa wp_photo_album_plus Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.86%May 4, 2026
- UnknownThemeREX addons Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.89%May 4, 2026
- Unknowncontempothemes real_estate_7 Incorrect Privilege AssignmentPatch nowKEVEPSS 0.78%May 4, 2026
- UnknownFavethemes homey Improper Privilege ManagementPatch nowKEVEPSS 0.43%May 4, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.79%May 4, 2026
- Unknownthrivethemes thrive_themes_builder Missing AuthorizationPatch nowKEVEPSS 0.36%May 4, 2026
- UnknownWordPress wordpress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 79.39%May 4, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.87%May 2, 2026
- UnknownApache brpc Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.52%May 1, 2026
- Critical9.3Synway smg_gateway_management_software Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.73%Apr 30, 2026
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 1.47%Apr 30, 2026
- Critical9.3Weaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.77%Apr 30, 2026
- High8.7Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.70%Apr 30, 2026
- Critical9.8Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints.Patch nowKEVEPSS 0.73%Apr 29, 2026
- UnknownJoomSport – for Sports: Team & League 'sortf' SQL InjectionPatch nowKEVEPSS 1.34%Apr 29, 2026
- High8.1ProFTPD ProFTPD Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.31%Apr 28, 2026
- Critical9.2opencats opencats Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.43%Apr 28, 2026
Sort