Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in podigee Podigee podigee allows Server Side Request Forgery.This issue affects Podigee: from n/a through <= 1.4.0.Check if you run itEPSS 0.22%Apr 8, 2026
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forge…Check if you run itEPSS 0.14%Apr 8, 2026
- Medium6.0Server-Side Request Forgery (SSRF) vulnerability in Brecht Visual Link Preview visual-link-preview allows Server Side Request Forgery.This issue affects Visual Link Pr…Check if you run itEPSS 0.21%Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Server Side Request…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issu…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Skywarrior Blackfyre blackfyre allows Cross Site Request Forgery.This issue affects Blackfyre: from n/a through <= 2.5.4.Check if you run itEPSS 0.18%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in mndpsingh287 Theme Editor theme-editor allows Code Injection.This issue affects Theme Editor: from n/a through <= 3.2.Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Magazine grandmagazine allows Cross Site Request Forgery.This issue affects Grand Magazine: from n/…Check if you run itEPSS 0.13%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from…Check if you run itEPSS 0.14%Apr 8, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Car Rental grandcarrental allows Cross Site Request Forgery.This issue affects Grand Car Rental: fr…Check if you run itEPSS 0.13%Apr 8, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Cross Site Request Forgery.This issue affects Grand Blog: from n/a through <= 3.1.Check if you run itEPSS 0.17%Apr 8, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Getty Images Getty Images getty-images allows Server Side Request Forgery.This issue affects Getty Images: from n/a…Check if you run itEPSS 0.23%Apr 8, 2026
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in spicethemes SpicePress spicepress allows Upload a Web Shell to a Web Server.This issue affects SpicePress: from n/a…Check if you run itEPSS 0.20%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Appointment appointment allows Upload a Web Shell to a Web Server.This issue affects Appointment: fr…Check if you run itEPSS 0.20%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Busiprof busiprof allows Upload a Web Shell to a Web Server.This issue affects Busiprof: from n/a th…Check if you run itEPSS 0.20%Apr 8, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in themearile NewsExo newsexo allows Cross Site Request Forgery.This issue affects NewsExo: from n/a through <= 7.1.Check if you run itEPSS 0.14%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Bluestreet bluestreet allows Cross Site Request Forgery.This issue affects Bluestreet: from n/a through <= 1.7.3.Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Photography grandphotography allows Cross Site Request Forgery.This issue affects Grand Photography…Check if you run itEPSS 0.14%Apr 8, 2026
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: fro…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.5Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.3The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7.Check if you run itEPSS 0.44%Apr 8, 2026
- Medium5.3The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in vers…Check if you run itEPSS 0.49%Apr 8, 2026
- Medium4.3The Quran Translations plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.3The Riaxe Product Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4 via the '/wp-json/InkXEProd…Check if you run itEPSS 0.64%Apr 8, 2026
- Medium5.3The PZ Frontend Manager plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.6.Check if you run itEPSS 0.42%Apr 8, 2026