Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Configured AccessCheck if you run itEPSS 0.28%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in immonex immonex Kickstart immonex-kickstart allows Stored XSS.This issue affecCheck if you run itEPSS 0.19%Mar 13, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a thrCheck if you run itEPSS 0.34%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.22%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a thrCheck if you run itEPSS 0.27%Mar 13, 2026
- Medium6.3Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing hosts by observCheck if you run itEPSS 0.22%Mar 13, 2026
- Medium5.3Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observinCheck if you run itEPSS 0.28%Mar 13, 2026
- Medium4.3The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the add_menu_item() method hookeCheck if you run itEPSS 0.24%Mar 13, 2026
- Medium6.7A flaw was found in systemd.Check if you run itEPSS 0.17%Mar 13, 2026
- High8.8A broken access control may allow an authenticated user to perform a horizontal privilege escalation.Check if you run itEPSS 0.36%Mar 13, 2026
- Medium6.4The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in all versions up to, and including, 5.4.5.0.Check if you run itEPSS 0.27%Mar 13, 2026
- Medium5.3The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-controlled key in all versions up to, and including, 6.28.Check if you run itEPSS 0.39%Mar 13, 2026
- Medium5.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium6.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2 due to missing validation on a user controlled key iCheck if you run itEPSS 0.26%Mar 13, 2026
- High7.2Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.23%Mar 13, 2026
- High7.5The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28.Check if you run itEPSS 0.35%Mar 13, 2026
- High7.5NSquared simply_schedule_appointments Missing AuthorizationPatch nowKEVEPSS 0.34%Mar 13, 2026
- Medium4.3The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incCheck if you run itEPSS 0.25%Mar 13, 2026
- Critical9.8The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommercCheck this weekEPSS 34.33%Mar 13, 2026
- Medium6.9The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability.Check if you run itEPSS 0.19%Mar 13, 2026
- Medium6.4A container privilege escalation flaw was found in certain Fuse images.Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.4A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images.Check if you run itEPSS 0.19%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notifications by sendingCheck if you run itEPSS 0.37%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability in the getFollowsPage() function that allows attackers to trigger unauthorized actions without nonce valiCheck if you run itEPSS 0.18%Mar 13, 2026
- Low2.1wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through unescaped attachment URLs in HTML output by exploiting tCheck if you run itEPSS 0.19%Mar 13, 2026
Sort