Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0.Check if you run itEPSS 0.16%Sep 27, 2025
- Medium4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0.Check if you run itEPSS 0.16%Sep 27, 2025
- High8.1SysReptor is a fully customizable pentest reporting platform.Check if you run itEPSS 0.34%Sep 27, 2025
- Medium5.3A vulnerability has been found in itsourcecode Open Source Job Portal 1.0.Check if you run itEPSS 0.34%Sep 26, 2025
- Medium6.9A vulnerability was detected in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.42%Sep 26, 2025
- Medium6.9A security flaw has been discovered in code-projects E-Commerce Website 1.0.Check if you run itEPSS 0.51%Sep 26, 2025
- Medium6.9A vulnerability was identified in code-projects E-Commerce Website 1.0.Check if you run itEPSS 0.51%Sep 26, 2025
- Medium6.9A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60.Check if you run itEPSS 0.39%Sep 26, 2025
- High8.6Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proCheck if you run itEPSS 0.31%Sep 26, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kontur.us kontur Admin Style kontur-admin-style allows Stored XSS.This issue aCheck if you run itEPSS 0.18%Sep 26, 2025
- Medium4.4The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient inCheck if you run itEPSS 0.20%Sep 26, 2025
- Medium6.5The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete backup functiCheck if you run itEPSS 0.66%Sep 26, 2025
- High7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download-add.php file in all versions up to, and inclCheck if you run itEPSS 0.66%Sep 26, 2025
- Medium4.9The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_all_urls() function in all versions up to, and including, 5.2.7 due to insufficieCheck if you run itEPSS 0.33%Sep 26, 2025
- Medium4.9The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_posts_with_internal_featured_image() function in all versions up to, and includinCheck if you run itEPSS 0.33%Sep 26, 2025
- Medium4.3The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20.Check if you run itEPSS 0.20%Sep 26, 2025
- Medium4.3The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12.Check if you run itEPSS 0.17%Sep 26, 2025
- Medium5.1A security flaw has been discovered in MuYuCMS up to 2.7.Check if you run itEPSS 0.40%Sep 26, 2025
- Critical10.0In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .NET Remoting library in the Watchdoc administration interfacCheck if you run itEPSS 0.72%Sep 26, 2025
- Medium6.9A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273.Check if you run itEPSS 0.40%Sep 25, 2025
- High7.3This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials.Check if you run itEPSS 0.25%Sep 25, 2025
- High8.8This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents ofCheck if you run itEPSS 0.28%Sep 25, 2025
- Critical9.9Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.42%Sep 25, 2025
- Critical9.9Project Gardener implements the automated management and operation of Kubernetes clusters as a service.Check if you run itEPSS 0.53%Sep 25, 2025
- Medium6.0Dify is an open-source LLM app development platform.Check if you run itEPSS 0.25%Sep 25, 2025
Sort