Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanisCheck this weekEPSS 59.00%Sep 29, 2025
- Critical10.0Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin accoCheck if you run itEPSS 1.23%Sep 29, 2025
- Critical9.4Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GPCheck this weekEPSS 70.00%Sep 29, 2025
- Critical9.2Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain two hardcoded privateCheck this weekEPSS 41.00%Sep 29, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer inCheck this weekEPSS 23.00%Sep 29, 2025
- High8.2A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0.Check this weekEPSS 38.00%Sep 29, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.44%Sep 29, 2025
- Medium4.3The VM Menu Reorder plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check this weekEPSS 13.00%Sep 27, 2025
- Medium4.3The Professional Contact Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check this weekEPSS 13.00%Sep 27, 2025
- Medium4.3The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0.Check this weekEPSS 13.00%Sep 27, 2025
- Medium6.1The Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incluCheck this weekEPSS 12.00%Sep 27, 2025
- Medium4.3The Sync Feedly plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check this weekEPSS 13.00%Sep 27, 2025
- Medium4.3The HidePost plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.8.Check this weekEPSS 13.00%Sep 27, 2025
- Medium4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0.Check this weekEPSS 16.00%Sep 27, 2025
- Medium4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0.Check this weekEPSS 16.00%Sep 27, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kontur.us kontur Admin Style kontur-admin-style allows Stored XSS.This issue aCheck this weekEPSS 18.00%Sep 26, 2025
- Medium4.4The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient inCheck this weekEPSS 20.00%Sep 26, 2025
- Medium6.5The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete backup functiCheck this weekEPSS 67.00%Sep 26, 2025
- High7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download-add.php file in all versions up to, and inclCheck this weekEPSS 67.00%Sep 26, 2025
- Medium4.9The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_all_urls() function in all versions up to, and including, 5.2.7 due to insufficieCheck this weekEPSS 33.00%Sep 26, 2025
- Medium4.9The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_posts_with_internal_featured_image() function in all versions up to, and includinCheck this weekEPSS 33.00%Sep 26, 2025
- Medium4.3The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20.Check this weekEPSS 20.00%Sep 26, 2025
- Medium4.3The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12.Check this weekEPSS 17.00%Sep 26, 2025
- High7.7Horilla is a free and open source Human Resource Management System (HRMS).Check this weekEPSS 29.00%Sep 24, 2025
- Medium4.8A security flaw has been discovered in Mangati NovoSGA up to 2.2.9.Check this weekEPSS 31.00%Sep 24, 2025