Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BusiCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes AnCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This isCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting Incorrectly Configured Access Control Security Levels.ThisCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara BusinesCheck if you run itEPSS 0.25%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The ConferCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobScout: from n/a thrCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a thCheck if you run itEPSS 0.23%Mar 13, 2026
- Medium5.4Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textmetrics: fromCheck if you run itEPSS 0.23%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site Request Forgery.This issue affects Photo Gallery by 10Web: from n/aCheck if you run itEPSS 0.13%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in shufflehound Lemmony lemmony allows Cross Site Request Forgery.This issue affects Lemmony: from n/a through < 1.7.1.Check if you run itEPSS 0.12%Mar 13, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Fox LMS fox-lms allows Blind SQL Injection.This issue affects Fox LMS:Check if you run itEPSS 0.24%Mar 13, 2026
- Medium4.3Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Configured AccessCheck if you run itEPSS 0.28%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in immonex immonex Kickstart immonex-kickstart allows Stored XSS.This issue affecCheck if you run itEPSS 0.19%Mar 13, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a thrCheck if you run itEPSS 0.34%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.22%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a thrCheck if you run itEPSS 0.27%Mar 13, 2026
- Medium6.3Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing hosts by observCheck if you run itEPSS 0.22%Mar 13, 2026
- Medium5.3Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observinCheck if you run itEPSS 0.28%Mar 13, 2026
- Medium4.3The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the add_menu_item() method hookeCheck if you run itEPSS 0.24%Mar 13, 2026
- Medium6.7A flaw was found in systemd.Check if you run itEPSS 0.17%Mar 13, 2026
- High8.8A broken access control may allow an authenticated user to perform a horizontal privilege escalation.Check if you run itEPSS 0.36%Mar 13, 2026
- Medium6.4The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in all versions up to, and including, 5.4.5.0.Check if you run itEPSS 0.27%Mar 13, 2026
- Medium5.3The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-controlled key in all versions up to, and including, 6.28.Check if you run itEPSS 0.39%Mar 13, 2026
Sort