Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.40%May 20, 2026
- High8.8The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7.Check if you run itEPSS 1.56%May 20, 2026
- Medium6.1Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injected.Check if you run itEPSS 0.34%May 19, 2026
- Medium6.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6.Check if you run itEPSS 0.46%May 19, 2026
- Medium4.6In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnost…Check if you run itEPSS 0.27%May 19, 2026
- Medium5.3An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors.Check if you run itEPSS 0.15%May 19, 2026
- High8.2The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection.Check if you run itEPSS 0.39%May 19, 2026
- High8.2The extension fails to properly sanitize user input before using it in a database query.Check if you run itEPSS 0.56%May 19, 2026
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.32%May 19, 2026
- High7.2FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.87%May 18, 2026
- High8.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.97%May 18, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…Check if you run itEPSS 0.15%May 18, 2026
- Medium6.5Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal us…Check if you run itEPSS 0.40%May 18, 2026
- High7.3Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections.Check if you run itEPSS 0.34%May 18, 2026
- High7.5The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inc…Check if you run itEPSS 0.47%May 18, 2026
- High8.6The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated u…Check if you run itEPSS 0.45%May 18, 2026
- Critical9.8Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs.Check if you run itEPSS 0.55%May 17, 2026
- Critical9.8Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws.Check if you run itEPSS 0.80%May 17, 2026
- High8.2Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections.Check if you run itEPSS 0.42%May 17, 2026
- Medium6.5Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.Check if you run itEPSS 0.36%May 16, 2026
- Medium5.3The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.43%May 16, 2026
- Medium6.5Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.Check if you run itEPSS 0.36%May 15, 2026
- High7.3Crypt::DSA versions before 1.20 for Perl generate seeds using rand.Check if you run itEPSS 0.41%May 15, 2026
- High8.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.42%May 15, 2026
- High7.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.34%May 15, 2026