Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability was found in Campcodes Complaint Management System 1.0.Check if you run itEPSS 0.46%Jul 7, 2025
- Medium6.9A vulnerability was found in Campcodes Complaint Management System 1.0.Check if you run itEPSS 0.55%Jul 7, 2025
- Medium5.3A vulnerability was found in Campcodes Complaint Management System 1.0.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium6.9A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical.Check if you run itEPSS 0.49%Jul 7, 2025
- Medium5.1A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic.Check if you run itEPSS 0.27%Jul 7, 2025
- Medium5.3A vulnerability was found in BoyunCMS up to 1.4.20.Check if you run itEPSS 0.38%Jul 7, 2025
- Medium5.3A vulnerability was found in BoyunCMS up to 1.4.20.Check if you run itEPSS 0.37%Jul 7, 2025
- Medium5.3A vulnerability was found in BoyunCMS up to 1.4.20.Check if you run itEPSS 0.45%Jul 7, 2025
- Medium5.3A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical.Check if you run itEPSS 0.36%Jul 7, 2025
- Medium6.3A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical.Check if you run itEPSS 0.47%Jul 6, 2025
- High7.5In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled.Check if you run itEPSS 1.92%Jul 5, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions allows PHP Local File ICheck if you run itEPSS 0.62%Jul 4, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File InclusiCheck if you run itEPSS 0.67%Jul 4, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-cCheck if you run itEPSS 0.58%Jul 4, 2025
- Low2.1A vulnerability was found in Monitorr up to 1.7.6m.Check if you run itEPSS 0.52%Jul 4, 2025
- High7.5Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution.Check if you run itEPSS 4.22%Jul 3, 2025
- Critical9.3A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations.Check if you run itEPSS 1.94%Jul 3, 2025
- High8.8The JKDEVKIT plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'font_upload_handler' function in all versions up to, andCheck if you run itEPSS 0.81%Jul 3, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, thCheck if you run itEPSS 0.33%Jul 3, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, thCheck if you run itEPSS 0.33%Jul 3, 2025
- Medium5.3The HttpOnly flag is set to false on the PHPSESSION cookie.Check if you run itEPSS 0.43%Jul 3, 2025
- Medium6.5The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4.Check if you run itEPSS 0.30%Jul 3, 2025
- Medium5.8In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.Check if you run itEPSS 0.40%Jul 3, 2025
- Critical9.8The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the 'themerex_callbacCheck if you run itEPSS 0.60%Jul 2, 2025
- High7.5The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.44.2 viaCheck if you run itEPSS 0.57%Jul 2, 2025