Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained bCheck if you run itEPSS 0.42%Jan 5, 2026
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (DSM extenstio configuration modules) allowsCheck if you run itEPSS 0.19%Jan 5, 2026
- Medium6.5Improper Restriction of XML External Entity Reference vulnerability in Apache SIS.Check if you run itEPSS 0.70%Jan 5, 2026
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts configuration form modules) allows StoCheck if you run itEPSS 0.19%Jan 5, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-BasCheck if you run itEPSS 0.15%Jan 5, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager allows Cross Site Request Forgery.This issue affects WP Job Manager: from n/a through 2.0.0.Check if you run itEPSS 0.12%Jan 5, 2026
- Medium6.9A security flaw has been discovered in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.44%Jan 5, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects GCheck if you run itEPSS 0.16%Jan 5, 2026
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in Meow Apps Media File Renamer allows Using Malicious Files.This issue affects Media File Renamer: from n/a through 5Check if you run itEPSS 0.33%Jan 5, 2026
- High7.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic CorCheck if you run itEPSS 0.17%Jan 5, 2026
- Medium5.3A vulnerability was identified in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.37%Jan 5, 2026
- Medium5.3A vulnerability was determined in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.37%Jan 5, 2026
- Medium6.9A vulnerability was found in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.57%Jan 5, 2026
- Medium5.1A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1.Check if you run itEPSS 0.22%Jan 5, 2026
- Medium5.1A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1.Check if you run itEPSS 0.23%Jan 5, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affecCheck if you run itEPSS 0.27%Jan 5, 2026
- High7.5Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sell DownCheck if you run itEPSS 0.28%Jan 5, 2026
- High7.5Missing Authorization vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FollCheck if you run itEPSS 0.28%Jan 5, 2026
- High8.6Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured AcceCheck if you run itEPSS 0.27%Jan 5, 2026
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects CustoCheck if you run itEPSS 0.29%Jan 5, 2026
- Medium6.3Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Retrieve Embedded Sensitive Data.ThiCheck if you run itEPSS 0.20%Jan 5, 2026
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in awethemes AweBooking awebooking allows Retrieve Embedded Sensitive Data.This issue affects AweBooking: from n/a tCheck if you run itEPSS 0.26%Jan 5, 2026
- Medium5.3A vulnerability was detected in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.37%Jan 5, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web Shell to a Web Server.This issue affects Shopo: from n/a through 1.1.4.Check if you run itEPSS 0.31%Jan 5, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0.Check if you run itEPSS 0.36%Jan 5, 2026
Sort