Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6.Check if you run itEPSS 0.44%Apr 8, 2026
- Medium4.1An insufficient session expiration vulnerability exists in the latest version of parisneo/lollms.Check if you run itEPSS 0.23%Apr 8, 2026
- High8.8The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 th…Check if you run itEPSS 0.21%Apr 8, 2026
- Medium5.4The Download Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in the and methods in in all versions up to, and including, 5.1.10.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Apr 8, 2026
- Medium4.3Plane is an an open-source project management tool.Check if you run itEPSS 0.29%Apr 7, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.32%Apr 7, 2026
- High8.1RedwoodSDK is a server-first React framework.Check if you run itEPSS 0.19%Apr 7, 2026
- Medium6.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Apr 7, 2026
- Medium6.3Vite is a frontend tooling framework for JavaScript.Patch nowKEVEPSS 0.98%Apr 7, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.Check if you run itEPSS 2.62%Apr 7, 2026
- High7.7OpenObserve is a cloud-native observability platform.Check if you run itEPSS 0.36%Apr 7, 2026
- Medium6.5Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.31%Apr 7, 2026
- Medium5.3OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.26%Apr 7, 2026
- Critical9.1ChurchCRM is an open-source church management system.Check if you run itEPSS 1.82%Apr 7, 2026
- High8.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.32%Apr 7, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.38%Apr 7, 2026
- High7.0ChurchCRM is an open-source church management system.Check if you run itEPSS 0.36%Apr 7, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server.Check if you run itEPSS 0.47%Apr 7, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server.Check if you run itEPSS 0.52%Apr 7, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server.Check if you run itEPSS 0.52%Apr 7, 2026
- Critical9.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.Patch nowKEVEPSS 9.22%Apr 7, 2026
- High7.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.46%Apr 7, 2026
- Medium5.0LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.30%Apr 7, 2026
- High7.3Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.32%Apr 7, 2026