Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change PCheck if you run itEPSS 0.52%Apr 28, 2025
- Critical9.8An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password coCheck if you run itEPSS 0.78%Apr 28, 2025
- High7.2The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS.Check if you run itEPSS 0.27%Apr 28, 2025
- Medium5.1A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical.Check this weekEPSS 14.82%Apr 27, 2025
- Medium5.3A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3.Check if you run itEPSS 0.30%Apr 27, 2025
- Medium6.9A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0.Check if you run itEPSS 0.50%Apr 27, 2025
- Medium6.9A vulnerability was found in ScriptAndTools eCommerce-website-in-PHP 3.0 and classified as problematic.Check if you run itEPSS 0.77%Apr 27, 2025
- Medium6.9A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical.Check if you run itEPSS 0.50%Apr 27, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0.Check if you run itEPSS 0.50%Apr 27, 2025
- Medium5.3A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0.Check if you run itEPSS 0.53%Apr 27, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0.Check if you run itEPSS 0.45%Apr 27, 2025
- High8.1The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' ACheck if you run itEPSS 0.88%Apr 26, 2025
- High7.2The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_valCheck if you run itEPSS 0.76%Apr 26, 2025
- High8.1The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' paCheck if you run itEPSS 0.77%Apr 26, 2025
- High8.8The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget.Check if you run itEPSS 0.79%Apr 26, 2025
- Medium6.4An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ inCheck if you run itEPSS 1.59%Apr 26, 2025
- High7.5A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—viCheck if you run itEPSS 0.51%Apr 25, 2025
- High7.5The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file.Check if you run itEPSS 0.55%Apr 25, 2025
- Medium6.1The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.dec.2012.Check if you run itEPSS 0.31%Apr 25, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpoperations Arrival arrival allows PHP Local File InclusioCheck if you run itEPSS 0.69%Apr 24, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag grace-mag allows PHP Local File IncCheck if you run itEPSS 0.75%Apr 24, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codeworkweb CWW Portfolio cww-portfolio allows PHP Local FiCheck if you run itEPSS 0.75%Apr 24, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommercCheck if you run itEPSS 0.75%Apr 24, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Capturly Capturly capturly-optimize-your-website allows PHPCheck if you run itEPSS 0.69%Apr 24, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay product-lister-ebay allCheck if you run itEPSS 0.75%Apr 24, 2025
Sort