Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.26%Mar 25, 2026
- High8.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Dokan, Inc.Check if you run itEPSS 0.55%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softwebmedia Gyan Elements gyan-elements allows Reflected XSS.Thi…Check if you run itEPSS 0.19%Mar 25, 2026
- High7.5Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Con…Check if you run itEPSS 0.39%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue affects Golo: fro…Check if you run itEPSS 0.19%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Ac…Check if you run itEPSS 0.32%Mar 25, 2026
- High8.1Deserialization of Untrusted Data vulnerability in xtemos WoodMart woodmart allows Object Injection.This issue affects WoodMart: from n/a through <= 8.3.8.Check if you run itEPSS 0.33%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allow…Check if you run itEPSS 0.19%Mar 25, 2026
- High7.5Missing Authorization vulnerability in BlueGlass Interactive AG Jobs for WordPress job-postings allows Exploiting Incorrectly Configured Access Control Security Levels…Check if you run itEPSS 0.38%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in Ruhul Amin My Album Gallery my-album-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.32%Mar 25, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This iss…Check if you run itEPSS 0.41%Mar 25, 2026
- High7.2Deserialization of Untrusted Data vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Object Injection.This issue affects Product Fee…Check if you run itEPSS 0.53%Mar 25, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in flexcubed PitchPrint pitchprint allows Path Traversal.This issue affect…Check if you run itEPSS 0.59%Mar 25, 2026
- High7.5Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Level…Check if you run itEPSS 0.33%Mar 25, 2026
- High8.6Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Secur…Check if you run itEPSS 0.39%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Zorka zorka allows Reflected XSS.This issue affects Zorka…Check if you run itEPSS 0.24%Mar 25, 2026
- High8.5n8n is an open source workflow automation platform.Check if you run itEPSS 0.41%Mar 25, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.99%Mar 25, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.28%Mar 25, 2026
- Medium5.6Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2.Check if you run itEPSS 0.31%Mar 25, 2026
- Medium5.5Requests is a HTTP library.Check if you run itEPSS 0.19%Mar 25, 2026
- High7.5Kiteworks is a private data network (PDN).Check if you run itEPSS 0.25%Mar 25, 2026
- High7.2Kiteworks is a private data network (PDN).Check if you run itEPSS 1.05%Mar 25, 2026
- Medium6.5Kiteworks is a private data network (PDN).Check if you run itEPSS 0.34%Mar 25, 2026
- Medium5.8Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7.Check if you run itEPSS 0.34%Mar 25, 2026
Sort