Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php file in all versionsCheck this weekEPSS 59.00%Aug 16, 2025
- Medium6.6The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via the 'tab' parameter.Check this weekEPSS 85.00%Aug 16, 2025
- Medium6.1The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check this weekEPSS 18.00%Aug 16, 2025
- High8.8The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter.Check this weekEPSS 75.00%Aug 16, 2025
- Medium6.1The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check this weekEPSS 18.00%Aug 16, 2025
- Medium6.9A vulnerability has been found in projectworlds Travel Management System 1.0.Check this weekEPSS 47.00%Aug 15, 2025
- Medium6.9A vulnerability was identified in projectworlds Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability was determined in projectworlds Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability was found in projectworlds Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability has been found in projectworlds Visitor Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A flaw has been found in code-projects Online Medicine Guide 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability has been found in code-projects Online Medicine Guide 1.0.Check this weekEPSS 57.00%Aug 15, 2025
- Medium5.3A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0.Check this weekEPSS 36.00%Aug 15, 2025
- Medium6.9A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1.Check this weekEPSS 42.00%Aug 15, 2025
- Critical9.8The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the delete_files() function inCheck this weekEPSS 70.00%Aug 15, 2025
- High7.5The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.0.53 via the 'bizcalv' shortcode.Check this weekEPSS 80.00%Aug 15, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Bank Management System up to 1.0.Check this weekEPSS 52.00%Aug 15, 2025
- Medium6.9A vulnerability was determined in SourceCodester Online Bank Management System up to 1.0.Check this weekEPSS 52.00%Aug 15, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium5.1A vulnerability has been found in D-Link DIR-818LW 1.04.Check this weekEPSS 65.00%Aug 15, 2025
- Medium6.9A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability was determined in code-projects Online Medicine Guide 1.0.Check this weekEPSS 44.00%Aug 15, 2025
- Medium6.9A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0.Check this weekEPSS 44.00%Aug 14, 2025
- Medium6.9A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0.Check this weekEPSS 44.00%Aug 14, 2025