Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317.Check this weekEPSS 34.00%Aug 19, 2025
- Medium5.1A vulnerability has been found in jasonclark getsemantic up to 040c96eb8cf9947488bd01b8de99b607b0519f7d.Check this weekEPSS 39.00%Aug 19, 2025
- Medium5.3A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7.Check this weekEPSS 52.00%Aug 19, 2025
- Critical9.8The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hook_rest_pre_dispaCheck this weekEPSS 18.03%Aug 19, 2025
- Critical9.8In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison.Check this weekEPSS 55.00%Aug 19, 2025
- Medium5.3EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interfacCheck this weekEPSS 71.00%Aug 19, 2025
- Medium6.1Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.Check this weekEPSS 24.00%Aug 19, 2025
- Critical10.0Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modifier to interpolate SQCheck this weekEPSS 64.00%Aug 19, 2025
- Critical9.8A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create a webshell and remote code execution via the path, contentCheck if you run itEPSS 1.21%Aug 19, 2025
- Medium5.5Genealogy is a family tree PHP application.Check this weekEPSS 30.00%Aug 18, 2025
- High8.0Genealogy is a family tree PHP application.Check this weekEPSS 33.00%Aug 18, 2025
- UnknownExtensive VC Addons for WPBakery Php Extract Function Unauthenticated RCEPatch nowKEVEPSS 55.46%Aug 17, 2025
- High8.8The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'header_layout' parameter.Check this weekEPSS 51.00%Aug 16, 2025
- Medium6.1The weichuncai(WP伪春菜) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.Check this weekEPSS 14.00%Aug 16, 2025
- High8.8The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php file in all versionsCheck this weekEPSS 59.00%Aug 16, 2025
- Medium6.6The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via the 'tab' parameter.Check this weekEPSS 85.00%Aug 16, 2025
- Medium6.1The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check this weekEPSS 18.00%Aug 16, 2025
- High8.8The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter.Check this weekEPSS 75.00%Aug 16, 2025
- Medium6.1The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check this weekEPSS 18.00%Aug 16, 2025
- Medium6.9A vulnerability has been found in projectworlds Travel Management System 1.0.Check this weekEPSS 47.00%Aug 15, 2025
- Medium6.9A vulnerability was identified in projectworlds Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability was determined in projectworlds Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability was found in projectworlds Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability has been found in projectworlds Visitor Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A flaw has been found in code-projects Online Medicine Guide 1.0.Check this weekEPSS 44.00%Aug 15, 2025