Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This iCheck if you run itEPSS 0.25%Dec 30, 2025
- Medium5.3Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.25%Dec 30, 2025
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in SimpleCalendar Google Calendar Events google-calendar-events allows Exploiting Incorrectly Configured Access ContrCheck if you run itEPSS 0.29%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Core designthemes-core allows DOM-Based XSS.This issCheck if you run itEPSS 0.20%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Portfolio Addon designthemes-portfolio-addon allowsCheck if you run itEPSS 0.19%Dec 30, 2025
- Medium5.4Missing Authorization vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle BooCheck if you run itEPSS 0.25%Dec 30, 2025
- Medium4.3Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.TCheck if you run itEPSS 0.31%Dec 30, 2025
- Medium6.6Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-lCheck if you run itEPSS 0.48%Dec 30, 2025
- Medium6.3A vulnerability has been found in PHPEMS up to 11.0.Check if you run itEPSS 0.41%Dec 30, 2025
- Medium6.9A flaw has been found in code-projects Simple Stock System 1.0.Check if you run itEPSS 0.48%Dec 30, 2025
- Low2.3A vulnerability was detected in PHPEMS up to 11.0.Check if you run itEPSS 0.24%Dec 30, 2025
- Critical9.1DVP-12SE11T - Out-of-bound memory write VulnerabilityCheck if you run itEPSS 0.34%Dec 30, 2025
- High7.5DVP-12SE11T - Denial of Service VulnerabilityCheck if you run itEPSS 0.32%Dec 30, 2025
- Medium5.1A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1.Check if you run itEPSS 0.22%Dec 30, 2025
- High8.1DVP-12SE11T - Authentication Bypass via Partial Password DisclosureCheck if you run itEPSS 0.34%Dec 30, 2025
- Critical9.1DVP-12SE11T - Password Protection BypassCheck if you run itEPSS 0.32%Dec 30, 2025
- High8.7A weakness has been identified in Tenda M3 1.0.0.13(4903).Check if you run itEPSS 2.88%Dec 30, 2025
- High8.7A security flaw has been discovered in Tenda M3 1.0.0.13(4903).Check if you run itEPSS 0.74%Dec 30, 2025
- Medium5.1ISOinsight developed by NetVision Information has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes inCheck if you run itEPSS 0.24%Dec 30, 2025
- High8.7A vulnerability was identified in Tenda M3 1.0.0.13(4903).Check if you run itEPSS 0.74%Dec 30, 2025
- High8.7A vulnerability was determined in Tenda M3 1.0.0.13(4903).Check if you run itEPSS 0.74%Dec 30, 2025
- High8.7A vulnerability was found in Tenda M3 1.0.0.13(4903).Check if you run itEPSS 0.74%Dec 30, 2025
- Medium6.9A vulnerability has been found in Tenda CH22 up to 1.0.0.1.Check if you run itEPSS 4.58%Dec 30, 2025
- Medium6.1The Advance WP Query Search Filter WordPress plugin through 1.0.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-SiteCheck if you run itEPSS 0.18%Dec 30, 2025
- Medium6.1The Advance WP Query Search Filter WordPress plugin through 1.0.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-SiteCheck if you run itEPSS 0.18%Dec 30, 2025
Sort