Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.0.82.Check if you run itEPSS 0.12%Dec 9, 2025
- Medium4.3Authorization Bypass Through User-Controlled Key vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows Exploiting Incorrectly Configured Access Control Security LCheck if you run itEPSS 0.20%Dec 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.48.Check if you run itEPSS 0.12%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in Joe Dolson My Calendar my-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Calendar: frCheck if you run itEPSS 0.18%Dec 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows Cross Site Request Forgery.This issue affects JNews Paywall: from n/a through < 12.0.Check if you run itEPSS 0.12%Dec 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows Cross Site Request Forgery.This issue affects Ultimate FAQ: from n/a through <= 2.4.Check if you run itEPSS 0.12%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured AccessCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElemCheck if you run itEPSS 0.19%Dec 9, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FrCheck if you run itEPSS 0.20%Dec 9, 2025
- Medium4.7Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affCheck if you run itEPSS 0.44%Dec 9, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a through <= 3.15.7.Check if you run itEPSS 0.20%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDAM: from n/a through <= 1.4.Check if you run itEPSS 0.22%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in Foysal Imran IDonate idonate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonate: from n/a thrCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wbcom DesignCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-contact-woocommerce allows Exploiting Incorrectly Configured Access Control SecurityCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EmCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aCheck if you run itEPSS 0.27%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.33%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security LevelCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sailing: from n/a througCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a throCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/aCheck if you run itEPSS 0.25%Dec 9, 2025
Sort