Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2.Check if you run itEPSS 0.41%Feb 26, 2026
- Medium5.3The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions uCheck if you run itEPSS 0.21%Feb 26, 2026
- Low2.7fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.Check if you run itEPSS 0.54%Feb 26, 2026
- Medium4.8Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.22%Feb 26, 2026
- Medium4.8Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.26%Feb 26, 2026
- Medium4.8Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.19%Feb 26, 2026
- High7.6Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.55%Feb 26, 2026
- Medium4.3Packistry is a self-hosted Composer repository designed to handle PHP package distribution.Check if you run itEPSS 0.21%Feb 26, 2026
- Critical9.8Langflow is a tool for building and deploying AI-powered agents and workflows.Check this weekEPSS 35.25%Feb 26, 2026
- Critical9.3Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.54%Feb 26, 2026
- High8.4Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.47%Feb 26, 2026
- High8.2Koa is middleware for Node.js using ES2017 async functions.Check if you run itEPSS 0.39%Feb 26, 2026
- Medium4.9Live Helper Chat is an open-source application that enables live support websites.Check if you run itEPSS 0.22%Feb 26, 2026
- High8.8Agenta is an open-source LLMOps platform.Check if you run itEPSS 0.36%Feb 26, 2026
- Critical9.9Agenta is an open-source LLMOps platform.Check if you run itEPSS 0.56%Feb 26, 2026
- Medium6.1Copyparty is a portable file server.Check if you run itEPSS 0.20%Feb 26, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.30%Feb 26, 2026
- Medium4.4The Custom Logo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.2 due to insufficient input sanitizatioCheck if you run itEPSS 0.22%Feb 26, 2026
- Medium6.4The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode's and attributes in all versions up to, and including, 3.Check if you run itEPSS 0.22%Feb 26, 2026
- Medium4.4The WP Social Meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.1 due to insufficient input sanitiCheck if you run itEPSS 0.23%Feb 26, 2026
- Medium4.4The TP2WP Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Watched domains' textarea on the attachment importer settings page in all versions upCheck if you run itEPSS 0.23%Feb 26, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.87%Feb 26, 2026
- Medium6.1The EM Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.3.1.Check if you run itEPSS 0.25%Feb 26, 2026
- Critical10.0OpenLIT is an open source platform for AI engineering.Check if you run itEPSS 0.45%Feb 26, 2026
- Medium6.6pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.40%Feb 26, 2026
Sort