Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was identified in macrozheng mall-swarm up to 1.0.3.Check if you run itEPSS 0.26%Nov 13, 2025
- Medium5.3Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA.Check if you run itEPSS 0.26%Nov 13, 2025
- Medium5.9Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write ouCheck if you run itEPSS 0.36%Nov 13, 2025
- Low3.1Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema.Check if you run itEPSS 0.24%Nov 13, 2025
- High7.5pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.Check if you run itEPSS 0.23%Nov 13, 2025
- High7.5pgAdmin <= 9.9 is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker to inject special LDAP characters in the username, causing theCheck if you run itEPSS 0.48%Nov 13, 2025
- Medium6.8pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems.Check if you run itEPSS 0.91%Nov 13, 2025
- Critical9.8pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files.Check this weekEPSS 12.71%Nov 13, 2025
- Medium5.1Cross-site Scripting (XSS) vulnerability reflected in xCally's Omnichannel v3.30.1.Check if you run itEPSS 0.33%Nov 13, 2025
- Medium4.3The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functioCheck if you run itEPSS 0.34%Nov 13, 2025
- Medium5.3Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBCheck if you run itEPSS 0.28%Nov 13, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-blocks allows Stored XSS.This issue affects Qi Blocks: fromCheck if you run itEPSS 0.17%Nov 13, 2025
- Medium4.3Missing Authorization vulnerability in WebToffee Order Export & Order Import for WooCommerce order-import-export-for-woocommerce allows Exploiting Incorrectly Configured Access ConCheck if you run itEPSS 0.22%Nov 13, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking Calendar booking allows Stored XSS.This issue affects BookinCheck if you run itEPSS 0.17%Nov 13, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Stored XSS.This isCheck if you run itEPSS 0.17%Nov 13, 2025
- Medium4.3Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affecCheck if you run itEPSS 0.20%Nov 13, 2025
- Medium5.3Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YOP Poll: from n/a through <Check if you run itEPSS 0.23%Nov 13, 2025
- Medium6.5Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectCheck if you run itEPSS 0.25%Nov 13, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DCheck if you run itEPSS 0.17%Nov 13, 2025
- Medium5.3Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a thrCheck if you run itEPSS 0.29%Nov 13, 2025
- Medium6.5Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: frCheck if you run itEPSS 0.26%Nov 13, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking Manager booking-manager allows Stored XSS.This issue affectsCheck if you run itEPSS 0.17%Nov 13, 2025
- Medium4.3Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security LeveCheck if you run itEPSS 0.19%Nov 13, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a thCheck if you run itEPSS 0.11%Nov 13, 2025
- Medium4.3Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.ThCheck if you run itEPSS 0.21%Nov 13, 2025
Sort