Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through <= 3.7.3.Check if you run itEPSS 0.36%Oct 31, 2025
- Low2.7Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control SecuriCheck if you run itEPSS 0.23%Oct 31, 2025
- Medium4.3Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank MathCheck if you run itEPSS 0.22%Oct 31, 2025
- Low3.8Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RankCheck if you run itEPSS 0.24%Oct 31, 2025
- Medium4.5A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view pCheck if you run itEPSS 0.48%Oct 31, 2025
- Medium6.3Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections.Check if you run itEPSS 0.32%Oct 31, 2025
- High8.8Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability.Check if you run itEPSS 0.33%Oct 31, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() The comedi_buf_munge() function performs a modulo operation witCheck if you run itEPSS 0.21%Oct 31, 2025
- High7.5The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9.Check if you run itEPSS 0.30%Oct 31, 2025
- Medium5.3The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'erifl_file' AJAX action in all versions up to, andCheck if you run itEPSS 0.26%Oct 31, 2025
- High7.4When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users.Check if you run itEPSS 0.57%Oct 31, 2025
- Medium5.4Malicious content from E-Mail can be used to perform a redressing attack.Check if you run itEPSS 0.19%Oct 31, 2025
- High7.5Malicious or unintentional API requests can be used to add significant amount of data to caches.Check if you run itEPSS 0.37%Oct 31, 2025
- High7.5Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords written to error logs and forwarded to log sinks when log level is INFO/DEBUG.Check if you run itEPSS 0.48%Oct 31, 2025
- Medium4.3The Depicter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 4.0.4.Check if you run itEPSS 0.17%Oct 31, 2025
- Medium5.3The OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.Check if you run itEPSS 0.34%Oct 31, 2025
- Medium4.3The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'tec_qr_code_modal' AJAX endpoint in all versions up to,Check if you run itEPSS 0.24%Oct 31, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Abis Technology BAPSIS allows Blind SQL Injection.Check if you run itEPSS 0.37%Oct 31, 2025
- Medium6.8The Zombify plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5.Check if you run itEPSS 0.40%Oct 31, 2025
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.95%Oct 31, 2025
- High8.8The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the save_fields() function in all versionsCheck if you run itEPSS 0.70%Oct 31, 2025
- Medium5.3The RealPress WordPress plugin before 1.1.0 registers the REST routes without proper permission checks, allowing the creation of pages and sending of emails from the site.Check if you run itEPSS 0.31%Oct 31, 2025
- High8.6FutureNet MA and IP-K series provided by Century Systems Co., Ltd.Check if you run itEPSS 1.23%Oct 31, 2025
- Medium6.9FutureNet MA and IP-K series provided by Century Systems Co., Ltd.Check if you run itEPSS 0.32%Oct 31, 2025
- Medium6.4The Qzzr Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qzzr' shortcode in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.23%Oct 31, 2025
Sort