Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Photo Gallery by Ays plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.8.Check if you run itEPSS 0.16%Dec 2, 2025
- Medium6.1The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.2Check if you run itEPSS 0.26%Dec 2, 2025
- Medium4.1The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to perform SQL iCheck if you run itEPSS 0.25%Dec 2, 2025
- High7.7The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacksCheck if you run itEPSS 0.31%Dec 2, 2025
- Medium6.5The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.19.Check if you run itEPSS 0.16%Dec 2, 2025
- High7.2The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, 1.5.17 due to iCheck if you run itEPSS 0.30%Dec 2, 2025
- Medium4.4In GPU pdma, there is a possible information disclosure due to a missing bounds check.Check if you run itEPSS 0.08%Dec 2, 2025
- Medium4.4In GPU pdma, there is a possible memory corruption due to a missing permission check.Check if you run itEPSS 0.07%Dec 2, 2025
- High7.8In display, there is a possible out of bounds read due to a missing bounds check.Check if you run itEPSS 0.09%Dec 2, 2025
- High7.8In mmdvfs, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.08%Dec 2, 2025
- Medium5.3In Modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.37%Dec 2, 2025
- Medium6.4The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting vCheck if you run itEPSS 0.18%Dec 2, 2025
- High8.8The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles() function in all versioCheck if you run itEPSS 0.55%Dec 2, 2025
- High7.5Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerable to SQL injection via the 'title' parameter in com.wanli.lvzhoucms.service.ContentServicCheck if you run itEPSS 0.30%Dec 2, 2025
- Critical9.8dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php.Check if you run itEPSS 0.46%Dec 2, 2025
- Critical9.8Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.Check if you run itEPSS 0.41%Dec 2, 2025
- Critical9.8acfextended advanced_custom_fields_extended Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 67.62%Dec 2, 2025
- High8.8vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.66%Dec 1, 2025
- Critical9.8MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers.Check if you run itEPSS 2.23%Dec 1, 2025
- Medium6.9fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server.Check if you run itEPSS 0.18%Dec 1, 2025
- High8.5Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.41%Dec 1, 2025
- High8.7Gin-vue-admin is a backstage management system based on vue and gin.Check if you run itEPSS 0.58%Dec 1, 2025
- Medium6.9Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails.Check if you run itEPSS 0.37%Dec 1, 2025
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.21%Dec 1, 2025
- Medium6.9mdast-util-to-hast is an mdast utility to transform to hast.Check if you run itEPSS 0.30%Dec 1, 2025
Sort