Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Aviana aviana allows PHP Local File InclusionCheck if you run itEPSS 0.59%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Wolmart wolmart allows PHP Local File Inclusion.Check if you run itEPSS 0.61%Mar 5, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Robert Seyfriedsberger ionCube tester plus ioncube-tester-plus allows Path TraversalCheck if you run itEPSS 1.74%Mar 5, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Schmit Theater for WordPress theatre allows Stored XSS.This issue affecCheck if you run itEPSS 0.25%Mar 5, 2026
- High7.5Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access ControlCheck if you run itEPSS 0.47%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Molla molla allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.59%Mar 5, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Riode Core riode-core allows Blind SQL Injection.This issue affectsCheck if you run itEPSS 0.45%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Remons remons allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.59%Mar 5, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.Check if you run itEPSS 0.50%Mar 5, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through < 2.0.1.Check if you run itEPSS 0.50%Mar 5, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Lendiz lendiz allows Upload a Web Shell to a Web Server.This issue affects Lendiz: from n/a through < 2.Check if you run itEPSS 0.52%Mar 5, 2026
- Medium5.8Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP BooCheck if you run itEPSS 0.37%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Classter classter allows Object Injection.This issue affects Classter: from n/a through <= 2.5.Check if you run itEPSS 0.61%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Berger berger allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.59%Mar 5, 2026
- Critical9.8Ghost is a Node.js content management system.Check if you run itEPSS 4.90%Mar 5, 2026
- Medium6.9The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities.Check if you run itEPSS 0.19%Mar 5, 2026
- Critical9.8ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sCheck if you run itEPSS 0.50%Mar 5, 2026
- Medium6.9EC-CUBE provided by EC-CUBE CO.,LTD.Check if you run itEPSS 0.39%Mar 5, 2026
- Medium5.1An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker toCheck if you run itEPSS 0.19%Mar 5, 2026
- Medium4.3The Media Library Assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mla_update_compat_fields_action() functCheck if you run itEPSS 0.23%Mar 5, 2026
- UnknownCVE-2025-62461 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsanfälligkeit in Windows Projected File System bezüglich RechteerweiterungenCheck if you run itEPSS 0.43%Mar 5, 2026
- UnknownCVE-2025-62565 - Security Update Guide - Microsoft - Windows File Explorer Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.61%Mar 5, 2026
- UnknownCVE-2025-21949 - Security Update Guide - Microsoft - LoongArch: Set hugetlb mmap base address aligned with pmd sizeCheck if you run itEPSS 0.19%Mar 5, 2026
- UnknownCVE-2025-62464 - Security Update Guide - Microsoft - Windows Projected File System Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.43%Mar 5, 2026
- UnknownCVE-2023-45284 - Security Update Guide - Microsoft - Incorrect detection of reserved device names on Windows in path/filepathCheck if you run itEPSS 1.10%Mar 5, 2026
Sort