Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured Access Control SecurityCheck if you run itEPSS 0.24%Feb 3, 2026
- Medium5.4Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a thCheck if you run itEPSS 0.20%Feb 3, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Events Calendar Shortcode & Block the-events-calendar-shortcodeCheck if you run itEPSS 0.15%Feb 3, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affectsCheck if you run itEPSS 0.12%Feb 3, 2026
- Medium4.3Missing Authorization vulnerability in approveme WP Forms Signature Contract Add-On wp-forms-signature-contract-add-on allows Exploiting Incorrectly Configured Access Control SecurCheck if you run itEPSS 0.22%Feb 3, 2026
- Medium6.5Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VisCheck if you run itEPSS 0.35%Feb 3, 2026
- Medium5.3Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affCheck if you run itEPSS 0.27%Feb 3, 2026
- Medium5.3Missing Authorization vulnerability in ameliabooking Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/Check if you run itEPSS 0.27%Feb 3, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Copyscape Copyscape Premium copyscape-premium allows Cross Site Request Forgery.This issue affects Copyscape Premium: from n/a thCheck if you run itEPSS 0.13%Feb 3, 2026
- Medium4.3Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control SecurityCheck if you run itEPSS 0.23%Feb 3, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Sigmize sigmize allows Cross Site Request Forgery.This issue affects Sigmize: from n/a through <= 0.0.9.Check if you run itEPSS 0.13%Feb 3, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Server Side Request Forgery.This issue affects Grand Blog: from n/a through < 3.1.5.Check if you run itEPSS 0.20%Feb 3, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This isCheck if you run itEPSS 0.20%Feb 3, 2026
- Medium6.5Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SCheck if you run itEPSS 0.29%Feb 3, 2026
- High8.8Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.0.8.Check if you run itEPSS 0.43%Feb 3, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows StCheck if you run itEPSS 0.20%Feb 3, 2026
- Medium4.3Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a throughCheck if you run itEPSS 0.22%Feb 3, 2026
- Medium4.3Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.ThCheck if you run itEPSS 0.23%Feb 3, 2026
- Medium5.3Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control SecuriCheck if you run itEPSS 0.25%Feb 3, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through <= 5.1.Check if you run itEPSS 0.13%Feb 3, 2026
- Medium4.3Missing Authorization vulnerability in Themefic Travelfic Toolkit travelfic-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TraveCheck if you run itEPSS 0.22%Feb 3, 2026
- Medium4.3Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affCheck if you run itEPSS 0.23%Feb 3, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows Stored XSS.This issue affects Better SCheck if you run itEPSS 0.21%Feb 3, 2026
- Medium5.4A flaw was found in Moodle.Check if you run itEPSS 0.30%Feb 3, 2026
- High7.3A flaw was found in moodle.Check if you run itEPSS 0.30%Feb 3, 2026
Sort