Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.8.2.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.9The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'ce_venue_name' CSV field in the function in all versions up to, and including, 1.5.8.Check if you run itEPSS 0.33%Mar 7, 2026
- Medium4.3The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8.Check if you run itEPSS 0.16%Mar 7, 2026
- High8.5Plane is an an open-source project management tool.Check if you run itEPSS 0.34%Mar 6, 2026
- High8.2Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.42%Mar 6, 2026
- High8.7Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.63%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.43%Mar 6, 2026
- High7.5@hono/node-server allows running the Hono application on Node.js.Check if you run itEPSS 0.43%Mar 6, 2026
- High7.5The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns.Check if you run itEPSS 0.51%Mar 6, 2026
- High8.7Snipe-IT versions prior to 8.3.7 contain sensitive user attributes related to account privileges that are insufficiently protected against mass assignment.Check if you run itEPSS 0.47%Mar 6, 2026
- Medium6.9OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious…Check if you run itEPSS 0.16%Mar 6, 2026
- Medium6.9Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged POST requests.Check if you run itEPSS 0.13%Mar 6, 2026
- Medium6.9Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the…Check if you run itEPSS 0.14%Mar 6, 2026
- Medium6.9Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting…Check if you run itEPSS 0.13%Mar 6, 2026
- Medium6.9ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php.Check if you run itEPSS 0.13%Mar 6, 2026
- High8.8EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.Check if you run itEPSS 0.29%Mar 6, 2026
- Medium5.3Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submit…Check if you run itEPSS 0.22%Mar 6, 2026
- High7.5The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in adm…Check if you run itEPSS 0.19%Mar 6, 2026
- Medium5.7SiYuan is a personal knowledge management system.Check if you run itEPSS 0.50%Mar 6, 2026
- Critical9.8The PowerPack for LearnDash WordPress plugin before 1.3.0 does not have authorization and CRSF checks in an AJAX action, allowing unauthenticated users to update arbit…Check if you run itEPSS 0.41%Mar 6, 2026
- Medium4.3The WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could allow attackers to make a logged in admin remove…Check if you run itEPSS 0.10%Mar 6, 2026
- Medium5.0Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.18%Mar 6, 2026
- Critical9.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.64%Mar 6, 2026
- Critical9.3WWBN AVideo is an open source video platform.Check if you run itEPSS 1.04%Mar 6, 2026
- Critical9.0Chamilo is a learning management system.Check if you run itEPSS 0.26%Mar 6, 2026