Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Homeo homeo allows PHP Local File In…Check if you run itEPSS 0.40%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in MWP Development Diet Calorie Calculator diet-calorie-calculator allows Exploiting Incorrectly Configured Access Control Security…Check if you run itEPSS 0.20%Apr 8, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Freeio freeio allows PHP Local File…Check if you run itEPSS 0.40%Apr 8, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Emphires emphires allows PHP…Check if you run itEPSS 0.40%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in webmuehle Court Reservation court-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.24%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Manoj Kumar MK Google Directions google-distance-calculator allow…Check if you run itEPSS 0.17%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in shrikantkale iZooto izooto-web-push allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects i…Check if you run itEPSS 0.24%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in shiptime ShipTime: Discounted Shipping Rates shiptime-discount-shipping allows Exploiting Incorrectly Configured Access Control…Check if you run itEPSS 0.26%Apr 8, 2026
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forge…Check if you run itEPSS 0.11%Apr 8, 2026
- Medium6.0Server-Side Request Forgery (SSRF) vulnerability in Brecht Visual Link Preview visual-link-preview allows Server Side Request Forgery.This issue affects Visual Link Pr…Check if you run itEPSS 0.17%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in g5theme Book Previewer for Woocommerce book-previewer-for-woocommerce allows Exploiting Incorrectly Configured Access Control Se…Check if you run itEPSS 0.24%Apr 8, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jongmyoung Kim Korea SNS korea-sns allows DOM-Based XSS.This issu…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in telepathy Hello Bar Popup Builder hellobar allows DOM-Based XSS.T…Check if you run itEPSS 0.17%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Prelovac SEO Friendly Images seo-image allows DOM-Based…Check if you run itEPSS 0.17%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in leadrebel Leadrebel leadrebel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadreb…Check if you run itEPSS 0.23%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in ProWCPlugins Product Price by Formula for WooCommerce product-price-by-formula-for-woocommerce allows Exploiting Incorrectly Con…Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Coding Panda Panda Pods Repeater Field panda-pods-repeater-field allows Exploiting Incorrectly Configured Access Control Securit…Check if you run itEPSS 0.29%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in leadlovers leadlovers forms leadlovers-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Exploiting Incorrectly Configured Access…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in igms iGMS Direct Booking igms-direct-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.20%Apr 8, 2026
- Medium6.5Missing Authorization vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Unitech Web UnitechPay unitechpay-paiements-mobile-money allows Exploiting Incorrectly Configured Access Control Security Levels…Check if you run itEPSS 0.21%Apr 8, 2026
Sort