Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing…Check if you run itEPSS 0.28%Oct 17, 2026
- Medium6.8The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and…Check if you run itEPSS 0.23%Oct 17, 2026
- Medium5.3The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress plugin before 1.120.70 does not perform any…Check if you run itEPSS 0.20%Oct 17, 2026
- Medium6.5The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthen…Check if you run itEPSS 0.18%Oct 17, 2026
- Medium6.5The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator…Check if you run itEPSS 0.13%Oct 17, 2026
- Medium4.3The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect vi…Check if you run itEPSS 0.16%Oct 17, 2026
- Low3.7The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names…Check if you run itEPSS 0.17%Oct 17, 2026
- Medium6.8The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticate…Check if you run itEPSS 0.23%Oct 17, 2026
- Medium6.6The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content…Check if you run itEPSS 0.35%Oct 17, 2026
- Medium5.3The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitte…Check if you run itEPSS 0.18%Oct 17, 2026
- MediumShopper is a Headless e-commerce Admin Panel.Check if you run itEPSS 0.28%Oct 17, 2026
- MediumA use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4.Check if you run itEPSS 0.14%Oct 17, 2026
- High7.5An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1.Check if you run itEPSS 0.49%Oct 17, 2026
- High8.1An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1.Check if you run itEPSS 0.39%Oct 17, 2026
- HighAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1.Check if you run itEPSS 0.86%Oct 17, 2026
- CriticalMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.Check if you run itEPSS 0.37%Oct 17, 2026
- High7.5Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affe…Check if you run itEPSS 0.34%Oct 17, 2026
- Medium5.3The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment st…Check if you run itEPSS 0.18%Oct 17, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fancy Comments WordPress fancy-facebook-comments…Check if you run itEPSS 0.19%Oct 17, 2026
- MediumFossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing a…Check if you run itEPSS 0.21%Oct 17, 2026
- CriticalDockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp cl…Check if you run itEPSS 0.39%Oct 17, 2026
- LowA flaw has been found in LMCache up to 0.5.4.Check if you run itEPSS 0.08%Oct 17, 2026
- Medium5.9Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCheck if you run itEPSS 0.31%Oct 16, 2026
- High8.1OpenHuman is an open-source agent harness available as a desktop application and Rust library.Check if you run itEPSS 0.16%Oct 16, 2026
- High7.1Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering.Check if you run itEPSS 0.22%Oct 16, 2026