Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Using MaliciousCheck if you run itEPSS 0.44%Aug 20, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.51%Aug 20, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.Check if you run itEPSS 0.56%Aug 20, 2025
- High8.8Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through <= 1.1.24.Check if you run itEPSS 0.37%Aug 20, 2025
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in Themeisle Otter - Gutenberg Block otter-blocks allows Retrieve Embedded Sensitive Data.This issue affects Otter -Check if you run itEPSS 0.37%Aug 20, 2025
- Medium5.5Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victimCheck if you run itEPSS 0.26%Aug 20, 2025
- Medium4.3The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcome_notice_import_handler() function in all versionCheck if you run itEPSS 0.24%Aug 20, 2025
- Medium5.3Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter.Check if you run itEPSS 0.25%Aug 20, 2025
- Medium6.4The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's woosq_btn shortcode in all versions up to, and includingCheck if you run itEPSS 0.25%Aug 20, 2025
- Medium5.1URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type.Check if you run itEPSS 0.21%Aug 20, 2025
- Medium6.9Movable Type contains an issue with use of less trusted source.Check if you run itEPSS 0.18%Aug 20, 2025
- Medium6.9A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input valCheck this weekEPSS 38.79%Aug 20, 2025
- High8.7A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue.Check this weekEPSS 43.88%Aug 20, 2025
- Medium5.3During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control.Check if you run itEPSS 1.23%Aug 20, 2025
- High7.5The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input inCheck if you run itEPSS 0.39%Aug 20, 2025
- High8.8The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_associated_files function inCheck if you run itEPSS 0.64%Aug 20, 2025
- High8.8The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input inCheck if you run itEPSS 0.52%Aug 20, 2025
- Critical9.3Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session andCheck if you run itEPSS 0.33%Aug 20, 2025
- High8.8Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.21%Aug 20, 2025
- Medium5.1A flaw has been found in TOTVS Portal Meu RH up to 12.1.17.Check if you run itEPSS 0.26%Aug 20, 2025
- Medium6.9Commvault Commvault Use of Hard-coded PasswordPatch nowKEVEPSS 7.76%Aug 20, 2025
- High7.3Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function.Check if you run itEPSS 0.28%Aug 20, 2025
- Medium6.5Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function.Check if you run itEPSS 0.26%Aug 20, 2025
- High7.5Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.Check if you run itEPSS 0.40%Aug 20, 2025
- High7.5Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList.Check if you run itEPSS 0.40%Aug 20, 2025
Sort