Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled.Check if you run itEPSS 1.92%Jul 5, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions allows PHP Local File ICheck this weekEPSS 62.00%Jul 4, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File InclusiCheck this weekEPSS 67.00%Jul 4, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-cCheck this weekEPSS 58.00%Jul 4, 2025
- Low2.1A vulnerability was found in Monitorr up to 1.7.6m.Check this weekEPSS 52.00%Jul 4, 2025
- High7.5Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution.Check if you run itEPSS 4.22%Jul 3, 2025
- Critical9.3A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations.Check if you run itEPSS 1.94%Jul 3, 2025
- High8.8The JKDEVKIT plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'font_upload_handler' function in all versions up to, andCheck if you run itEPSS 0.81%Jul 3, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, thCheck this weekEPSS 33.00%Jul 3, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, thCheck this weekEPSS 33.00%Jul 3, 2025
- Medium5.3The HttpOnly flag is set to false on the PHPSESSION cookie.Check if you run itEPSS 0.43%Jul 3, 2025
- Medium6.5The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4.Check if you run itEPSS 0.30%Jul 3, 2025
- Medium5.8In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.Check this weekEPSS 41.00%Jul 3, 2025
- Critical9.8The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the 'themerex_callbacCheck if you run itEPSS 0.60%Jul 2, 2025
- High7.5The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.44.2 viaCheck this weekEPSS 57.00%Jul 2, 2025
- High8.8The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wp_rem_cs_widget_file_deCheck this weekEPSS 81.00%Jul 2, 2025
- Medium6.9A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical.Check this weekEPSS 61.00%Jul 1, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0.Check this weekEPSS 61.00%Jul 1, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0.Check this weekEPSS 61.00%Jul 1, 2025
- Medium6.9A vulnerability classified as critical was found in Campcodes Employee Management System 1.0.Check this weekEPSS 63.00%Jul 1, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Employee Management System 1.0.Check this weekEPSS 63.00%Jul 1, 2025
- Critical10.0A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software due to unsafe handling of untrusted input in the /get/image/ endpoint.Check if you run itEPSS 0.80%Jul 1, 2025
- Medium6.9A vulnerability was found in Campcodes Employee Management System 1.0.Check this weekEPSS 61.00%Jul 1, 2025
- Medium6.9A vulnerability was found in Campcodes Employee Management System 1.0.Check this weekEPSS 61.00%Jul 1, 2025
- Medium6.9A vulnerability was found in Campcodes Employee Management System 1.0.Check this weekEPSS 49.00%Jul 1, 2025