Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLi…EPSS 0.2%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.Th…EPSS 0.2%Oct 15, 2026
- Medium4.3Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engi…EPSS 0.2%Oct 15, 2026
- Medium6.3Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Conf…EPSS 0.2%Oct 15, 2026
- Medium4.3Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This is…EPSS 0.2%Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.Th…EPSS 0.2%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows…EPSS 0.2%Oct 15, 2026
- Medium5.4XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog).EPSS 0.2%Oct 15, 2026
- Medium5.4XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor.EPSS 0.2%Oct 15, 2026
- High7.5libp2p is a JavaScript implementation of the libp2p networking stack.EPSS 0.5%Oct 15, 2026
- Medium5.3Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.EPSS 0.2%Oct 15, 2026
- Medium5.8The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses.EPSS 0.1%Oct 15, 2026
- Medium6.3ammonia is a Rust library for repairing and securing untrusted HTML.Oct 15, 2026
- Medium5.3WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerabilityOct 15, 2026
- Medium5.3NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.Oct 15, 2026
- UnknownCVE-2026-67409 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67404 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67239 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67238 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67237 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67236 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67235 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67232 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-67231 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026
- UnknownCVE-2026-66079 is listed by USN-8933-1: RabbitMQ Server vulnerabilities.Oct 15, 2026