Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7.Check if you run itEPSS 0.31%Apr 11, 2026
- Critical9.3A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoint (/api/tel/zadarma.php).Check if you run itEPSS 0.43%Apr 11, 2026
- High8.3Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.Check if you run itEPSS 0.26%Apr 11, 2026
- Medium6.5Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.Check if you run itEPSS 0.25%Apr 11, 2026
- High7.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2.Check if you run itEPSS 0.51%Apr 11, 2026
- Medium4.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.37%Apr 11, 2026
- Medium5.0The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request Forgery in allCheck if you run itEPSS 0.37%Apr 11, 2026
- High8.8The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.3.Check if you run itEPSS 0.42%Apr 11, 2026
- Medium6.4The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clientId' block attribute in all versions up to, and including, 2.2.15.Check if you run itEPSS 0.19%Apr 11, 2026
- High7.2The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to,Check if you run itEPSS 0.46%Apr 11, 2026
- Medium6.5The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 9.2.1.Check if you run itEPSS 0.38%Apr 11, 2026
- Medium6.4The GreenShift - Animation and Page Builder Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 12.8.9 This is due to insuffiCheck if you run itEPSS 0.43%Apr 11, 2026
- Medium6.1The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL paths in versions up to, and including, 4.2.3 This is due tCheck if you run itEPSS 0.50%Apr 11, 2026
- Medium5.4The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.39%Apr 11, 2026
- Medium6.3Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.Check if you run itEPSS 0.13%Apr 11, 2026
- High8.8CGA-gxgg-c433-j7r9Open the advisoryApr 11, 2026
- Medium5.3OpenClaw Client PKCE Verifier Information Disclosure Vulnerability.Check if you run itEPSS 0.48%Apr 11, 2026
- High7.4OpenClaw Canvas Authentication Bypass Vulnerability.Check if you run itEPSS 0.84%Apr 11, 2026
- Medium6.5OpenClaw Canvas Path Traversal Information Disclosure Vulnerability.Check if you run itEPSS 1.19%Apr 11, 2026
- High7.3KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.21%Apr 11, 2026
- High7.5ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.90%Apr 11, 2026
- High7.5ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.54%Apr 11, 2026
- High7.5ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability.Check if you run itEPSS 0.71%Apr 11, 2026
- High7.8GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.62%Apr 11, 2026
- High7.8ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.66%Apr 11, 2026
Sort