Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The WP URL Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.13%Jun 14, 2025
- High7.2The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the fieldCheck if you run itEPSS 0.40%Jun 14, 2025
- High7.2The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.8.8.Check if you run itEPSS 0.62%Jun 14, 2025
- Medium4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.27.21.Check if you run itEPSS 0.17%Jun 14, 2025
- Medium4.3The WP Sliding Login/Dashboard Panel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.14%Jun 13, 2025
- Medium5.3The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1.Check if you run itEPSS 0.14%Jun 13, 2025
- Medium6.1The Link Shield plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.4.Check if you run itEPSS 0.13%Jun 13, 2025
- High8.4A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root uCheck if you run itEPSS 0.62%Jun 12, 2025
- Medium6.9A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local accessCheck if you run itEPSS 0.15%Jun 12, 2025
- Medium6.9There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55.Check if you run itEPSS 0.48%Jun 12, 2025
- Critical9.8The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1.Check if you run itEPSS 0.48%Jun 12, 2025
- Medium5.1A vulnerability was found in kiCode111 like-girl 5.2.0 and classified as critical.Check if you run itEPSS 0.41%Jun 12, 2025
- Medium5.1A vulnerability has been found in kiCode111 like-girl 5.2.0 and classified as critical.Check if you run itEPSS 0.41%Jun 12, 2025
- Medium5.1A vulnerability, which was classified as critical, was found in kiCode111 like-girl 5.2.0.Check if you run itEPSS 0.41%Jun 12, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in kiCode111 like-girl 5.2.0.Check if you run itEPSS 0.42%Jun 12, 2025
- Medium5.1A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0.Check if you run itEPSS 0.41%Jun 12, 2025
- Critical9.2Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.Check if you run itEPSS 0.56%Jun 11, 2025
- High7.3ClipShare is a lightweight and cross-platform tool for clipboard sharing.Check if you run itEPSS 0.17%Jun 11, 2025
- Medium6.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1Check if you run itEPSS 0.31%Jun 11, 2025
- Medium4.1Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administraCheck if you run itEPSS 0.28%Jun 11, 2025
- High8.8The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.Check if you run itEPSS 0.53%Jun 11, 2025
- High7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, aCheck if you run itEPSS 0.94%Jun 11, 2025
- Medium4.9The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10.Check if you run itEPSS 0.42%Jun 11, 2025
- Medium5.6Missing AuthorizationPatch nowKEVEPSS 0.23%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
Sort