Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 15.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…Check if you run itEPSS 0.16%May 14, 2026
- Medium6.1The GLS Shipping for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failed_orders' parameter in all versions up to, and incl…Check if you run itEPSS 0.17%May 14, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user…Check if you run itEPSS 0.19%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditio…Check if you run itEPSS 0.23%May 14, 2026
- High8.2The Fluent Forms plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 6.1.21.Check if you run itEPSS 0.22%May 14, 2026
- Medium6.4The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to stored cross-site scrip…Check if you run itEPSS 0.21%May 14, 2026
- Medium5.4The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data…Check if you run itEPSS 0.20%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…Check if you run itEPSS 0.27%May 14, 2026
- Medium5.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…Check if you run itEPSS 0.22%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…Check if you run itEPSS 0.20%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…Check if you run itEPSS 0.26%May 14, 2026
- Low2.7GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that when instance-level ap…Check if you run itEPSS 0.27%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed…Check if you run itEPSS 0.23%May 14, 2026
- Medium6.1interactive_geo_maps_project interactive_geo_maps Improper Neutralization of Script-Related HTML Tags in a Web PagePatch nowKEVEPSS 0.20%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…Check if you run itEPSS 0.23%May 14, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed…Check if you run itEPSS 0.18%May 14, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-controlled key in all versio…Check if you run itEPSS 0.42%May 14, 2026
- Medium4.3The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9.Check if you run itEPSS 0.34%May 14, 2026
- Medium6.4The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4.Check if you run itEPSS 0.35%May 14, 2026
- Medium6.5The Unlimited Elements for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'data[filter_search]' parameter in the get_cat_addons AJAX action in v…Check if you run itEPSS 0.49%May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection.Check if you run itEPSS 0.24%May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.Check if you run itEPSS 0.24%May 14, 2026
- High7.5Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.Check if you run itEPSS 0.31%May 14, 2026
- Medium6.5In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.Check if you run itEPSS 0.47%May 14, 2026
- Medium6.3Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.Check if you run itEPSS 0.09%May 14, 2026
Sort