Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5OctoPrint provides a web interface for controlling consumer 3D printers.Check this weekEPSS 22.14%Sep 9, 2025
- Critical10.0XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence.Check if you run itEPSS 1.05%Sep 9, 2025
- Medium4.3Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 5.0.9.Check if you run itEPSS 0.26%Sep 9, 2025
- High7.2K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are prot…Check if you run itEPSS 0.55%Sep 9, 2025
- Medium5.4Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for SecureCheck if you run itEPSS 0.45%Sep 9, 2025
- High8.0The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to unauthorized modification of data dueCheck if you run itEPSS 0.46%Sep 9, 2025
- Low3.5The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoredCheck if you run itEPSS 0.26%Sep 9, 2025
- Low3.8The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server eCheck if you run itEPSS 0.29%Sep 9, 2025
- Low2.0A vulnerability was found in Maccms10 2025.1000.4050.Check if you run itEPSS 0.33%Sep 9, 2025
- Low2.1A flaw has been found in uverif up to 3.2.Check if you run itEPSS 0.25%Sep 9, 2025
- Medium5.5A vulnerability was identified in SiempreCMS up to 1.3.6.Check if you run itEPSS 0.46%Sep 9, 2025
- High8.8The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handling.Check if you run itEPSS 0.43%Sep 9, 2025
- Critical9.8The Doccure theme for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.5.0.Check if you run itEPSS 0.40%Sep 8, 2025
- Medium6.9A vulnerability was determined in itsourcecode Student Information Management System 1.0.Check if you run itEPSS 0.43%Sep 6, 2025
- Medium4.9The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnerable to SQL Injection via the 'file_to_delete' parameter in all versions up to, and includiCheck if you run itEPSS 0.71%Sep 6, 2025
- Medium6.4The Admin Menu Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘placeholder’ parameter in all versions up to, and including, 1.14 due to insufficieCheck if you run itEPSS 0.24%Sep 6, 2025
- Critical9.8The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9.Check if you run itEPSS 0.49%Sep 6, 2025
- High7.2The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the import functionality in all versions up to, and includiCheck if you run itEPSS 0.66%Sep 6, 2025
- Medium4.9The User Registration & Membership plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in version 4.3.0.Check if you run itEPSS 0.34%Sep 6, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.42%Sep 5, 2025
- Low2.3A flaw has been found in elunez eladmin up to 2.7.Check if you run itEPSS 0.28%Sep 5, 2025
- High7.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.55%Sep 4, 2025
- Medium5.1api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX).Check if you run itEPSS 0.42%Sep 4, 2025
- Medium5.1contactmanager is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX).Check if you run itEPSS 0.36%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[AddonCheck if you run itEPSS 0.18%Sep 4, 2025
Sort