Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/Check if you run itEPSS 0.34%Feb 20, 2026
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in Shiprocket Shiprocket shiprocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issuCheck if you run itEPSS 0.35%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Leadpages Leadpages leadpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadpages: from n/aCheck if you run itEPSS 0.27%Feb 20, 2026
- High7.5Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aCheck if you run itEPSS 0.34%Feb 20, 2026
- High7.3Missing AuthorizationPatch nowKEVEPSS 0.64%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TravelpaCheck if you run itEPSS 0.24%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atlas Gondal Export Media URLs export-media-urls allows Reflected XSS.This issCheck if you run itEPSS 0.31%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issCheck if you run itEPSS 0.29%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faraz sms افزونه پیامک حرفه ای فراز اس ام اس farazsms allows Reflected XSS.ThiCheck if you run itEPSS 0.21%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.ThiCheck if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LC Wizard: fromCheck if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security LevelCheck if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Addonify Addonify – Compare Products For WooCommerce addonify-compare-products allows Exploiting Incorrectly Configured Access Control SecuriCheck if you run itEPSS 0.38%Feb 20, 2026
- High7.3Missing Authorization vulnerability in soporteblue Plugin BlueX for WooCommerce bluex-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This iCheck if you run itEPSS 0.37%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyTCheck if you run itEPSS 0.38%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy HotelCheck if you run itEPSS 0.35%Feb 20, 2026
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects OpenCheck if you run itEPSS 0.37%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TestimoCheck if you run itEPSS 0.35%Feb 20, 2026
- High8.8Authentication Bypass Using an Alternate Path or Channel vulnerability in kamleshyadav Miraculous Elementor miraculous-el allows Authentication Abuse.This issue affects MiraculousCheck if you run itEPSS 0.42%Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.Check if you run itEPSS 0.45%Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.Check if you run itEPSS 0.45%Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.Check if you run itEPSS 0.61%Feb 20, 2026
- High7.5Missing Authorization vulnerability in YayCommerce YayCurrency yaycurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayCurrency: fCheck if you run itEPSS 0.38%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtarCheck if you run itEPSS 0.28%Feb 20, 2026
Sort