Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5The Newsletter WordPress plugin before 8.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site ScCheck if you run itEPSS 0.31%May 5, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0.Check if you run itEPSS 0.52%May 5, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0.Check if you run itEPSS 0.52%May 5, 2025
- Medium6.9A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0.Check if you run itEPSS 0.52%May 5, 2025
- Medium6.9A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0.Check if you run itEPSS 0.52%May 5, 2025
- Medium5.3A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic.Check if you run itEPSS 0.73%May 5, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2.Check if you run itEPSS 0.33%May 5, 2025
- Medium5.1A vulnerability classified as problematic was found in SeaCMS 13.2.Check if you run itEPSS 0.32%May 5, 2025
- Medium6.5Incorrect access control in the component /admin/sys/datasource/ajaxList of jeeweb-mybatis-springboot v0.0.1.RELEASE allows attackers to access sensitive information via a craftedCheck if you run itEPSS 0.36%May 5, 2025
- Critical9.8Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.Check if you run itEPSS 0.45%May 5, 2025
- Critical9.8Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request.Check if you run itEPSS 0.45%May 5, 2025
- High7.7Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.Check if you run itEPSS 0.36%May 5, 2025
- Critical9.8SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php.Check if you run itEPSS 0.52%May 5, 2025
- Critical9.8SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php.Check if you run itEPSS 0.52%May 5, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0.Check if you run itEPSS 0.40%May 3, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Teacher Subject Allocation Management System 1.0.Check if you run itEPSS 0.63%May 3, 2025
- Medium6.1The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02.Check if you run itEPSS 0.18%May 3, 2025
- Medium6.1The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1.Check if you run itEPSS 0.18%May 3, 2025
- Critical9.8The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the register_action() function in versions 0.1 to 0.1.1.Check if you run itEPSS 0.57%May 3, 2025
- Medium6.1The Advanced Reorder Image Text Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.18%May 3, 2025
- Low3.5The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-SitCheck if you run itEPSS 0.27%May 2, 2025
- Critical9.8The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59.Check if you run itEPSS 0.55%May 2, 2025
- Medium6.9A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical.Check if you run itEPSS 0.60%May 2, 2025
- Medium6.9A vulnerability was found in itsourcecode Restaurant Management System 1.0.Check if you run itEPSS 0.60%May 2, 2025
- Critical9.8Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter.Check if you run itEPSS 2.66%May 2, 2025
Sort