Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows PCheck if you run itEPSS 0.57%Aug 20, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Schiocco Support Board supportboard allows PHP Local File ICheck if you run itEPSS 0.66%Aug 20, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Tribulant Software Newsletters newsletters-lite allows PHPCheck if you run itEPSS 0.57%Aug 20, 2025
- High7.5Cross-Site Request Forgery (CSRF) vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows PHP Local File Inclusion.This issue affects RealtynaCheck if you run itEPSS 0.21%Aug 20, 2025
- High7.5The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input inCheck if you run itEPSS 0.39%Aug 20, 2025
- High8.8The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_associated_files function inCheck if you run itEPSS 0.64%Aug 20, 2025
- High8.8The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input inCheck if you run itEPSS 0.52%Aug 20, 2025
- UnknownWHMpress whmcs Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 3.29%Aug 20, 2025
- Medium6.9A vulnerability was found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.44%Aug 19, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.43%Aug 19, 2025
- Medium6.9A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.56%Aug 19, 2025
- Medium5.3A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.46%Aug 19, 2025
- Medium6.9A vulnerability was identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317.Check if you run itEPSS 0.34%Aug 19, 2025
- Medium5.1A vulnerability has been found in jasonclark getsemantic up to 040c96eb8cf9947488bd01b8de99b607b0519f7d.Check if you run itEPSS 0.39%Aug 19, 2025
- Medium5.3A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7.Check if you run itEPSS 0.52%Aug 19, 2025
- Critical9.8The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hook_rest_pre_dispaCheck this weekEPSS 18.03%Aug 19, 2025
- Critical9.8In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison.Check if you run itEPSS 0.55%Aug 19, 2025
- Medium5.3EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interfacCheck if you run itEPSS 0.71%Aug 19, 2025
- Medium6.1Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.Check if you run itEPSS 0.24%Aug 19, 2025
- Critical10.0Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modifier to interpolate SQCheck if you run itEPSS 0.64%Aug 19, 2025
- Critical9.8A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create a webshell and remote code execution via the path, contentCheck if you run itEPSS 1.21%Aug 19, 2025
- Medium5.5Genealogy is a family tree PHP application.Check if you run itEPSS 0.30%Aug 18, 2025
- High8.0Genealogy is a family tree PHP application.Check if you run itEPSS 0.33%Aug 18, 2025
- UnknownExtensive VC Addons for WPBakery Php Extract Function Unauthenticated RCEPatch nowKEVEPSS 55.46%Aug 17, 2025
- High8.8The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'header_layout' parameter.Check if you run itEPSS 0.51%Aug 16, 2025