Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not proper…Check if you run itEPSS 0.33%Oct 16, 2026
- Medium4.3The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not…Check if you run itEPSS 0.22%Oct 16, 2026
- High7.5The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.16.0.6 This…Check if you run itEPSS 0.32%Oct 16, 2026
- Medium6.5The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to,…Check if you run itEPSS 0.27%Oct 16, 2026
- Medium6.5The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1.Check if you run itEPSS 0.28%Oct 16, 2026
- Medium4.3Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update HookCheck if you run itEPSS 0.21%Oct 16, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting with version 2011.2.804 and the Tooltip component starting with ver…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium6.9In Eclipse Jetty, across various versions of , and , two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per JakCheck if you run itEPSS 0.40%Oct 15, 2026
- Medium5.3Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project SecretCheck if you run itEPSS 0.13%Oct 15, 2026
- High8.1Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment IDCheck if you run itEPSS 0.30%Oct 15, 2026
- Medium6.5Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode TemplateCheck if you run itEPSS 0.22%Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsCheck if you run itEPSS 0.21%Oct 15, 2026
- Critical9.8The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.Patch nowKEVEPSS 0.29%Oct 15, 2026
- UnknownNginx UI: MCP Bypasses Directive Validation — Authenticated RCECheck if you run itEPSS 0.62%Oct 15, 2026
- UnknownNginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)Check if you run itEPSS 0.38%Oct 15, 2026
- UnknownNginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)Check if you run itEPSS 0.40%Oct 15, 2026
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributePatch nowKEVEPSS 0.15%Oct 15, 2026
- LowGitHub CLI allows path traversal through unescaped request URL componentsCheck if you run itEPSS 0.51%Oct 15, 2026
- High7.5Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perf…Check if you run itEPSS 0.23%Oct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- High8.2Important: pcre2 security updateOpen the advisoryOct 14, 2026
- UnknownWasmtime may not properly enforce async-entrypoint requirementOpen the advisoryOct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- MediumIncorrect Authorization in Kibana Leading to Sensitive Information DisclosureCheck if you run itEPSS 0.31%Oct 14, 2026
- MediumMissing Authorization in Kibana Leading to Information DisclosureCheck if you run itEPSS 0.21%Oct 14, 2026