Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php file in all versionsCheck if you run itEPSS 0.59%Aug 16, 2025
- Medium6.6The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via the 'tab' parameter.Check if you run itEPSS 0.85%Aug 16, 2025
- Medium6.1The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check if you run itEPSS 0.18%Aug 16, 2025
- High8.8The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter.Check if you run itEPSS 0.75%Aug 16, 2025
- Medium6.1The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.18%Aug 16, 2025
- Medium6.9A vulnerability has been found in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.47%Aug 15, 2025
- Medium6.9A vulnerability was identified in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability was determined in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability was found in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability has been found in projectworlds Visitor Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A flaw has been found in code-projects Online Medicine Guide 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability has been found in code-projects Online Medicine Guide 1.0.Check if you run itEPSS 0.57%Aug 15, 2025
- Medium5.3A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0.Check if you run itEPSS 0.36%Aug 15, 2025
- Medium6.9A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Aug 15, 2025
- Critical9.8The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the delete_files() function inCheck if you run itEPSS 0.70%Aug 15, 2025
- High7.5The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.0.53 via the 'bizcalv' shortcode.Check if you run itEPSS 0.80%Aug 15, 2025
- Medium6.9A vulnerability was identified in SourceCodester Online Bank Management System up to 1.0.Check if you run itEPSS 0.52%Aug 15, 2025
- Medium6.9A vulnerability was determined in SourceCodester Online Bank Management System up to 1.0.Check if you run itEPSS 0.52%Aug 15, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium5.1A vulnerability has been found in D-Link DIR-818LW 1.04.Check if you run itEPSS 0.65%Aug 15, 2025
- Medium6.9A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability was determined in code-projects Online Medicine Guide 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 14, 2025
- Medium6.9A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 14, 2025