Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.94%Jun 19, 2026
- Unknowntheme-fusion avada_builder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.01%Jun 18, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 88.51%Jun 15, 2026
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityPatch nowKEVEPSS 16.19%Jun 5, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 2.08%May 26, 2026
- Critical9.8The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2.Patch nowKEVEPSS 7.22%May 21, 2026
- Critical9.8Piotnet piotnet_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.28%May 19, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.87%May 19, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.Patch nowKEVEPSS 4.54%May 19, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.73%May 18, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36.Patch nowKEVEPSS 0.77%May 15, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.81%May 11, 2026
- UnknownW3 Total Cache '_parse_dynamic_mfunc' Command InjectionPatch nowKEVEPSS 22.11%May 7, 2026
- Unknowncridio listingpro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.40%May 4, 2026
- Unknownweb-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.52%May 4, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- Critical9.3Synway smg_gateway_management_software Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.73%Apr 30, 2026
- Critical9.3Weaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.77%Apr 30, 2026
- Critical9.2opencats opencats Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.43%Apr 28, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Unknownmjdm majordomo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.70%Apr 18, 2026
- High8.1The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7.Patch nowKEVEPSS 3.46%Apr 17, 2026
- Critical10.0Improper Access ControlPatch nowKEVEPSS 1.17%Apr 16, 2026
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.84%Apr 13, 2026
Sort