Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Run Log plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.10.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Plugin updates blocker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Sep 11, 2025
- Medium4.9The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log_duration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on theCheck if you run itEPSS 0.41%Sep 11, 2025
- Medium4.3The The integration of the AMO.CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.4.Check if you run itEPSS 0.16%Sep 11, 2025
- Medium4.3The Zoho Flow plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.14.1.Check if you run itEPSS 0.19%Sep 11, 2025
- Low3.8An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel -Check if you run itEPSS 0.20%Sep 11, 2025
- High7.8Hoverfly is an open source API simulation tool.Check if you run itEPSS 0.71%Sep 10, 2025
- Medium4.3Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.26%Sep 10, 2025
- High8.8The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2Check if you run itEPSS 0.33%Sep 10, 2025
- Medium6.3It is possible to bypass the administrator login screen on SolaX Cloud.Check if you run itEPSS 0.34%Sep 10, 2025
- High7.2The Import any XML, CSV or Excel File to WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in aCheck if you run itEPSS 0.56%Sep 10, 2025
- Medium4.3The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6.Check if you run itEPSS 0.17%Sep 10, 2025
- Medium4.3The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6.Check if you run itEPSS 0.17%Sep 10, 2025
- High8.8The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJ_gmgt_gmgt_add_user'Check if you run itEPSS 0.31%Sep 10, 2025
- High7.2The Responsive Filterable Portfolio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the HdnMediaSelection_image field in all veCheck if you run itEPSS 0.56%Sep 10, 2025
- High8.8A vulnerability has been found in HuangDou UTCMS V9 and classified as critical.Check if you run itEPSS 0.32%Sep 10, 2025
- High7.2Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 1.68%Sep 9, 2025
- Critical9.8An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MCheck if you run itEPSS 0.91%Sep 9, 2025
- Medium5.1Insecure Storage of Sensitive Information vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows admin access to the web interface.This issue affects GigaCenter ONT:Check if you run itEPSS 0.21%Sep 9, 2025
- High7.5Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.68%Sep 9, 2025
- Critical9.1Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.82%Sep 9, 2025
- High8.6Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.64%Sep 9, 2025
- High8.6listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 0.14%Sep 9, 2025
Sort