Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Geo Mashup plugin for WordPress is vulnerable to SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.17.Check if you run itEPSS 1.51%Feb 25, 2026
- High8.8The Advanced Woo Labels plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.37.Check if you run itEPSS 0.63%Feb 25, 2026
- High7.5The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure authenticationCheck if you run itEPSS 0.41%Feb 25, 2026
- Medium5.0The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.1.Check if you run itEPSS 0.27%Feb 25, 2026
- Medium4.8A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.27%Feb 25, 2026
- High8.7A security vulnerability has been detected in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 25, 2026
- Medium4.6URLs containing percent-encoded slashes ( or ) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it.Check if you run itEPSS 0.42%Feb 25, 2026
- High8.7A weakness has been identified in Tenda F453 1.0.0.3.Check if you run itEPSS 3.69%Feb 25, 2026
- High8.7A security flaw has been discovered in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 25, 2026
- Medium6.4The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘logoTag’ Site Identity block attribute in all versionCheck if you run itEPSS 0.18%Feb 25, 2026
- High8.7A vulnerability was identified in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 25, 2026
- High8.7A vulnerability was determined in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 25, 2026
- Medium6.9A vulnerability was found in itsourcecode News Portal Project 1.0.Check if you run itEPSS 0.43%Feb 25, 2026
- Critical9.3Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with arbitrary fileCheck if you run itEPSS 0.60%Feb 25, 2026
- Critical9.2The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings.Check if you run itEPSS 0.57%Feb 25, 2026
- High8.3The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS.Check if you run itEPSS 0.19%Feb 25, 2026
- Medium5.3A vulnerability has been found in SourceCodester Website Link Extractor 1.0.Check if you run itEPSS 0.32%Feb 25, 2026
- Medium6.9A vulnerability has been found in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.45%Feb 25, 2026
- Medium6.9A flaw has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.43%Feb 25, 2026
- Medium6.9A vulnerability was detected in itsourcecode College Management System 1.0.Check if you run itEPSS 0.45%Feb 25, 2026
- Medium5.3A security vulnerability has been detected in itsourcecode College Management System 1.0.Check if you run itEPSS 0.30%Feb 25, 2026
- High7.5Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Center API Configuration Manager: fCheck if you run itEPSS 0.18%Feb 25, 2026
- High8.6changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.50%Feb 25, 2026
- High7.1The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php.Check if you run itEPSS 0.43%Feb 25, 2026
- Medium5.1The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline.Check if you run itEPSS 0.24%Feb 25, 2026
Sort