Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7A flaw was found in systemd.Check if you run itEPSS 0.15%Mar 13, 2026
- High8.7Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing spec…Check if you run itEPSS 0.47%Mar 13, 2026
- Medium4.3The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the add_menu_item()…Check if you run itEPSS 0.22%Mar 13, 2026
- High8.8A broken access control may allow an authenticated user to perform a horizontal privilege escalation.Check if you run itEPSS 0.34%Mar 13, 2026
- Medium6.4The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in all versions up to, and including, 5.4.5.0.Check if you run itEPSS 0.25%Mar 13, 2026
- Critical9.8The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_f…Check this weekEPSS 32.44%Mar 13, 2026
- High7.2Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.22%Mar 13, 2026
- High7.5NSquared simply_schedule_appointments Missing AuthorizationPatch nowKEVEPSS 0.31%Mar 13, 2026
- Critical9.8telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether…Check this weekEPSS 44.83%Mar 13, 2026
- Medium5.7In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsCheck if you run itEPSS 0.10%Mar 13, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.24%Mar 13, 2026
- High7.5PyJWT is a JSON Web Token implementation in Python.Check if you run itEPSS 0.28%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This i…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in wptravelengine Travel Booking travel-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows DOM…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Level…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-c…Check if you run itEPSS 0.14%Mar 13, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Blind SQL…Check if you run itEPSS 0.23%Mar 13, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue…Check if you run itEPSS 0.23%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploitin…Check if you run itEPSS 0.18%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Edit…Check if you run itEPSS 0.10%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows DO…Check if you run itEPSS 0.13%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Avada Core fusion-core allows DOM-Based XSS.This issu…Check if you run itEPSS 0.13%Mar 13, 2026
Sort