Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom_fields_controller' function in all vCheck if you run itEPSS 0.30%Mar 7, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.8.2.Check if you run itEPSS 0.15%Mar 7, 2026
- High7.5The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute.Check if you run itEPSS 0.49%Mar 7, 2026
- High7.5The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 via the 'zipcode' parameter.Check if you run itEPSS 0.38%Mar 7, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message deletion due to a missing capability check on the pg_delete_msg()Check if you run itEPSS 0.25%Mar 7, 2026
- Medium6.4The Hammas Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apix' parameter in the 'hp-calendar-manage-redirect' shortcode in all versions up to,Check if you run itEPSS 0.22%Mar 7, 2026
- Medium5.1XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitraryCheck if you run itEPSS 0.21%Mar 7, 2026
- High8.6XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote aCheck if you run itEPSS 0.56%Mar 7, 2026
- High8.7XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows unauthenticateCheck if you run itEPSS 0.60%Mar 7, 2026
- Critical9.3XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows unauthenticateCheck if you run itEPSS 3.31%Mar 7, 2026
- Medium4.3The HUMN-1 AI Website Scanner & Human Certification by Winston AI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wCheck if you run itEPSS 0.31%Mar 6, 2026
- Medium4.3The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8.Check if you run itEPSS 0.18%Mar 6, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 12.8.3.Check if you run itEPSS 0.34%Mar 6, 2026
- Medium6.1Actions which insert URLs into the content attribute of HTML meta tags are not escaped.Check if you run itEPSS 0.37%Mar 6, 2026
- Low2.5On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File waCheck if you run itEPSS 0.22%Mar 6, 2026
- Medium5.9Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints.Check if you run itEPSS 0.38%Mar 6, 2026
- High7.5crypto/x509: Incorrect enforcement of email constraints in crypto/x509Check if you run itEPSS 0.66%Mar 6, 2026
- High8.5Plane is an an open-source project management tool.Check if you run itEPSS 0.38%Mar 6, 2026
- High7.5Plane is an an open-source project management tool.Check if you run itEPSS 0.42%Mar 6, 2026
- Low2.7Mercurius is a GraphQL adapter for Fastify.Check if you run itEPSS 0.40%Mar 6, 2026
- Medium5.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.31%Mar 6, 2026
- Low2.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.26%Mar 6, 2026
- Medium6.0Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.31%Mar 6, 2026
- High8.2Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.41%Mar 6, 2026
- Medium6.9MimeKit is a C# library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension (MIME), as defined by numerous IETF specificationsCheck if you run itEPSS 1.21%Mar 6, 2026
Sort