Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check this weekEPSS 33.00%Sep 11, 2025
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check this weekEPSS 33.00%Sep 11, 2025
- Medium4.3The PhpList Subber plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check this weekEPSS 16.00%Sep 11, 2025
- High8.0The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the postInCheck this weekEPSS 57.00%Sep 11, 2025
- High7.5The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6 via the 'uclwp_dashboard' shortcode.Check this weekEPSS 74.00%Sep 11, 2025
- High8.1The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, and including, 5.1.4.Check this weekEPSS 70.00%Sep 11, 2025
- Medium5.1A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to 124fe96324915490c81eaf7db3234b0b4e4bab3c.Check this weekEPSS 25.00%Sep 11, 2025
- Unknownsmartdatasoft smartblog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.49%Sep 11, 2025
- Medium5.3A security vulnerability has been detected in kalcaddle kodbox 1.61.Check this weekEPSS 46.00%Sep 10, 2025
- Medium5.3A weakness has been identified in 299ko up to 2.0.0.Check this weekEPSS 50.00%Sep 10, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Azon Dominator.Check this weekEPSS 33.00%Sep 10, 2025
- High7.2A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the server, leading to remote code execution aCheck if you run itEPSS 1.59%Sep 10, 2025
- High8.8A vulnerability has been found in HuangDou UTCMS V9 and classified as critical.Check this weekEPSS 32.00%Sep 10, 2025
- Medium5.1In pfSense CE /usr/local/www/status_traffic_totals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings beCheck this weekEPSS 14.48%Sep 9, 2025
- Medium5.1TinyEnv is an environment variable loader for PHP applications.Check this weekEPSS 21.00%Sep 9, 2025
- Medium5.1TinyEnv is an environment variable loader for PHP applications.Check this weekEPSS 19.00%Sep 9, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Ziston ziston allows PHP Local File Inclusion.This iCheck this weekEPSS 53.00%Sep 9, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Sala.Check this weekEPSS 55.00%Sep 9, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder superstorefinder-wp allows PHCheck this weekEPSS 58.00%Sep 9, 2025
- Low2.0A vulnerability was found in Maccms10 2025.1000.4050.Check if you run itEPSS 0.33%Sep 9, 2025
- Low2.0A weakness has been identified in SourceCodester Simple To-Do List System 1.0.Check if you run itEPSS 0.32%Sep 9, 2025
- Medium5.5A vulnerability was identified in SiempreCMS up to 1.3.6.Check if you run itEPSS 0.46%Sep 9, 2025
- Medium5.5A vulnerability was determined in SiempreCMS up to 1.3.6.Check if you run itEPSS 0.33%Sep 9, 2025
- Medium4.8A weakness has been identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.34%Sep 8, 2025
- Medium5.1A vulnerability has been found in code-projects Fruit Shop Management System 1.0.Check this weekEPSS 29.00%Sep 8, 2025