Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missinCheck if you run itEPSS 0.30%Nov 1, 2025
- High8.7ELOG allows an authenticated user to modify another user's profile.Check if you run itEPSS 0.38%Oct 31, 2025
- High8.6ELOG allows an authenticated user to upload arbitrary HTML files.Check this weekEPSS 32.00%Oct 31, 2025
- Critical9.2Denial of service of the web server through specific requests to this protocolCheck this weekEPSS 37.00%Oct 31, 2025
- Medium5.3The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.3 via the Analytify Tag HTML details.Check if you run itEPSS 0.27%Oct 31, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.Check if you run itEPSS 0.12%Oct 31, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR.Check if you run itEPSS 0.13%Oct 31, 2025
- High7.5Malicious or unintentional API requests can be used to add significant amount of data to caches.Check this weekEPSS 37.00%Oct 31, 2025
- Medium4.3The Depicter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 4.0.4.Check if you run itEPSS 0.17%Oct 31, 2025
- Medium6.8The Zombify plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5.Check if you run itEPSS 0.40%Oct 31, 2025
- Medium6.9FutureNet MA and IP-K series provided by Century Systems Co., Ltd.Check this weekEPSS 32.00%Oct 31, 2025
- Medium6.3Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization.Check this weekEPSS 20.00%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function.Check this weekEPSS 41.00%Oct 31, 2025
- High7.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.Check this weekEPSS 40.00%Oct 31, 2025
- High7.5Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function.Check this weekEPSS 40.00%Oct 31, 2025
Sort