Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowndokan dokan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Oct 13, 2026
- Unknownwpforms wpforms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.48%Oct 13, 2026
- Critical9.8Arbitrary file write in grpc phQueryMasterPatch nowKEVEPSS 0.46%Oct 13, 2026
- High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 25.98%Oct 13, 2026
- Unknownscripteo ads_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.32%Oct 13, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.46%Oct 13, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.49%Oct 13, 2026
- UnknownUltimate Member ultimate_member Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.72%Oct 13, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknowndynamiapps frontend_admin Improper Privilege ManagementPatch nowKEVEPSS 0.72%Oct 13, 2026
- UnknownFunnelKit funnel_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.25%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 13, 2026
- UnknownStellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.24%Oct 13, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.50%Oct 13, 2026
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.66%Oct 13, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.39%Oct 13, 2026
- Unknownhashthemes hash_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- UnknownStellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 49.91%Oct 13, 2026
- Unknowndavidlingren media_library_assistant Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.36%Oct 13, 2026
- UnknownLiteSpeed Technologies LiteSpeed Cache Incorrect Privilege AssignmentPatch nowKEVEPSS 0.90%Oct 13, 2026
- Unknownbrizy brizy Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- Unknownwppa wp_photo_album_plus Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.54%Oct 13, 2026
- UnknownWebToffee import_export_wordpress_users Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.52%Oct 13, 2026
Sort