Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownArcserve udp Incorrect AuthorizationPatch nowKEVEPSS 39.77%Aug 19, 2025
- UnknownZyxel nbg2105_firmware Improper AuthenticationPatch nowKEVEPSS 20.51%Aug 19, 2025
- Medium5.5librenms is a community-based GPL-licensed network monitoring system.Check this weekEPSS 14.81%Aug 18, 2025
- Medium4.8Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Check if you run itEPSS 0.25%Aug 18, 2025
- Medium4.8A vulnerability was detected in ZenCart 2.1.0.Check if you run itEPSS 0.28%Aug 18, 2025
- Medium5.1A weakness has been identified in zhenfeng13 My-Blog up to 1.0.0.Check if you run itEPSS 0.26%Aug 18, 2025
- Critical9.8The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0.Check if you run itEPSS 0.51%Aug 16, 2025
- Medium6.1The weichuncai(WP伪春菜) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.Check if you run itEPSS 0.14%Aug 16, 2025
- Medium6.6The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via the 'tab' parameter.Check if you run itEPSS 0.85%Aug 16, 2025
- Medium6.1The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.Check if you run itEPSS 0.18%Aug 16, 2025
- Medium6.1The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check if you run itEPSS 0.18%Aug 16, 2025
- High8.8The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to unauthorized admin account creation in all versions up to, and including, 67.7.0.Check if you run itEPSS 0.32%Aug 16, 2025
- Medium6.1The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.18%Aug 16, 2025
- Medium5.3The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'ayCheck if you run itEPSS 0.27%Aug 16, 2025
- Critical9.1A vulnerability has been found in the MSoft MFlash application that allows execution of arbitrary code on the server.Check if you run itEPSS 0.54%Aug 15, 2025
- Medium6.4The Plugin README Parser plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘target’ parameter in all versions up to, and including, 1.3.15 due to insufficieCheck if you run itEPSS 0.25%Aug 15, 2025
- Medium4.4The Alobaidi Captcha plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.3 due to insufficient inputCheck if you run itEPSS 0.26%Aug 15, 2025
- Medium6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.16%Aug 15, 2025
- Critical9.8The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4.Check if you run itEPSS 0.81%Aug 15, 2025
- Low3.8The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function.Check if you run itEPSS 0.28%Aug 15, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- High8.1The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwp_ajax_rCheck if you run itEPSS 0.66%Aug 15, 2025
- Medium6.9A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium5.3A vulnerability was identified in linlinjava litemall up to 1.8.0.Check if you run itEPSS 0.34%Aug 15, 2025
Sort