Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'frCheck if you run itEPSS 0.21%Sep 11, 2025
- Medium5.1Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of uCheck if you run itEPSS 0.21%Sep 11, 2025
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check if you run itEPSS 0.33%Sep 11, 2025
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check if you run itEPSS 0.33%Sep 11, 2025
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check if you run itEPSS 0.33%Sep 11, 2025
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check if you run itEPSS 0.33%Sep 11, 2025
- High8.8The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'tt_update_table_function' and 'tt_deleteCheck if you run itEPSS 0.36%Sep 11, 2025
- Medium4.3The LH Signing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.83.Check if you run itEPSS 0.17%Sep 11, 2025
- High8.8The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_impoCheck if you run itEPSS 0.31%Sep 11, 2025
- Medium4.3The PhpList Subber plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium5.3The Publish approval plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.15%Sep 11, 2025
- Medium6.1The Seo Monster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.3.Check if you run itEPSS 0.15%Sep 11, 2025
- Medium4.3The Admin in English with Switch plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.1.7.Check if you run itEPSS 0.13%Sep 11, 2025
- Medium4.3The Run Log plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.10.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Plugin updates blocker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Sep 11, 2025
- Medium4.9The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log_duration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on theCheck if you run itEPSS 0.41%Sep 11, 2025
- Medium4.3The The integration of the AMO.CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.4.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Zoho Flow plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.14.1.Check if you run itEPSS 0.19%Sep 11, 2025
- Low3.8An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel -Check if you run itEPSS 0.20%Sep 11, 2025
- High7.8Hoverfly is an open source API simulation tool.Check if you run itEPSS 0.71%Sep 10, 2025
- Medium4.3Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.26%Sep 10, 2025
- High8.8The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2Check if you run itEPSS 0.33%Sep 10, 2025
Sort