Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parametCheck if you run itEPSS 0.39%May 8, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6.Check if you run itEPSS 0.34%May 7, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in tggfref WP-Recall allows PHP Local File Inclusion.Check if you run itEPSS 0.62%May 7, 2025
- High8.8Path Traversal: '.../...//' vulnerability in StackWC Open Close WooCommerce Store woc-open-close allows PHP Local File Inclusion.This issue affects Open Close WooCommerce Store: frCheck if you run itEPSS 0.53%May 7, 2025
- High7.5Path Traversal: '.../...//' vulnerability in Fernando Briano List category posts list-category-posts allows PHP Local File Inclusion.This issue affects List category posts: from n/Check if you run itEPSS 0.72%May 7, 2025
- High8.1Cross-Site Request Forgery (CSRF) vulnerability in Iqonic Design Graphina graphina-elementor-charts-and-graphs allows PHP Local File Inclusion.This issue affects Graphina: from n/aCheck if you run itEPSS 0.36%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Social Events xt-facebook-Check if you run itEPSS 0.69%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-aCheck if you run itEPSS 0.77%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ruben Garcia GamiPress gamipress allows PHP Local File InclCheck if you run itEPSS 0.77%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nicdark Hotel Booking nd-booking allows PHP Local File InclCheck if you run itEPSS 0.77%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress PublishPress Authors publishpress-authors alloCheck if you run itEPSS 0.77%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File IncCheck if you run itEPSS 0.77%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Greg Winiarski WPAdverts wpadverts allows PHP Local File InCheck if you run itEPSS 0.77%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Chill Download Monitor download-monitor allows PHP LocalCheck if you run itEPSS 0.80%May 7, 2025
- Critical9.8The PGS Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.8.0 via deserialization of untrusted input in the 'import_header' fuCheck if you run itEPSS 0.68%May 6, 2025
- High7.1phpgt/Dom provides access to modern DOM APIs.Check if you run itEPSS 0.19%May 6, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0.Check if you run itEPSS 0.56%May 6, 2025
- Medium6.9A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0.Check if you run itEPSS 0.56%May 6, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0.Check if you run itEPSS 0.64%May 6, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0.Check if you run itEPSS 0.56%May 6, 2025
- Medium6.9A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0.Check if you run itEPSS 0.56%May 6, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0.Check if you run itEPSS 0.56%May 6, 2025
- Medium6.9A vulnerability classified as critical was found in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.64%May 6, 2025
- Medium5.3A vulnerability was found in 74CMS up to 3.33.0.Check if you run itEPSS 0.73%May 6, 2025
Sort