Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "string_builder::escape_and_append()" when processi…Check if you run itEPSS 0.28%May 14, 2026
- High8.7Comarch ERP Optima client makes use of a hard-coded password for a database user.Check if you run itEPSS 0.23%May 14, 2026
- High7.5Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in.Check if you run itEPSS 0.11%May 14, 2026
- Critical9.8Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd.Check if you run itEPSS 0.43%May 14, 2026
- Critical9.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd.Check if you run itEPSS 0.36%May 14, 2026
- High7.5The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit.Check if you run itEPSS 0.27%May 14, 2026
- Critical9.1The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.26%May 14, 2026
- Medium6.4The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tag' parameter in all versions up to, and inc…Check if you run itEPSS 0.26%May 14, 2026
- Medium5.3The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the _get_post_property_from_querystring() fun…Check if you run itEPSS 0.35%May 14, 2026
- Medium6.4The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'more' parameter in all versions up to, and including, 2.1.1 due to insuff…Check if you run itEPSS 0.16%May 14, 2026
- Medium5.3The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5.Check if you run itEPSS 0.45%May 14, 2026
- Medium6.5The Media Sync plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.9 via the 'sub_dir' and 'media_items' parameters.Check if you run itEPSS 0.60%May 14, 2026
- Critical9.8The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.44%May 14, 2026
- High8.8The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.29%May 14, 2026
- Critical9.8The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler.Check if you run itEPSS 0.66%May 14, 2026
- Medium6.4The Meta Field Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' block attribute in all versions up to, and including, 1.5.2 du…Check if you run itEPSS 0.16%May 14, 2026
- Medium6.5The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'project_sea…Check if you run itEPSS 0.22%May 14, 2026
- High8.2The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in al…Check if you run itEPSS 0.23%May 14, 2026
- Medium4.3The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 5.3.2.Check if you run itEPSS 0.10%May 14, 2026
- Medium6.5The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.5.13.Check if you run itEPSS 0.24%May 14, 2026
- High8.1The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.4.107.Check if you run itEPSS 0.27%May 14, 2026
- High7.2The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31.Check if you run itEPSS 0.26%May 14, 2026
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the bt_bb_button shortcode in all versions up to, a…Check if you run itEPSS 0.16%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…Check if you run itEPSS 0.18%May 14, 2026
- Low3.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…Check if you run itEPSS 0.17%May 14, 2026
Sort