Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in ScriptAndTools Online-Travling-System 1.0.Check if you run itEPSS 0.56%Apr 29, 2025
- Medium4.3The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_pluginCheck if you run itEPSS 0.30%Apr 29, 2025
- Critical9.8Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php.Check if you run itEPSS 0.42%Apr 29, 2025
- High7.5An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and pasCheck if you run itEPSS 0.41%Apr 29, 2025
- Unknownthecontrolgroup voyager Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.22%Apr 29, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0.Check if you run itEPSS 0.56%Apr 28, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.Check if you run itEPSS 0.70%Apr 28, 2025
- Medium5.3A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.Check if you run itEPSS 0.55%Apr 28, 2025
- Medium5.3A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.Check if you run itEPSS 0.50%Apr 28, 2025
- Medium6.9A vulnerability was found in PHPGurukul Art Gallery Management System 1.0.Check if you run itEPSS 0.52%Apr 28, 2025
- Medium6.9A vulnerability was found in PHPGurukul Art Gallery Management System 1.0.Check if you run itEPSS 0.52%Apr 28, 2025
- Medium5.1A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0.Check if you run itEPSS 0.35%Apr 28, 2025
- Low3.5The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow high privilege users sCheck if you run itEPSS 0.27%Apr 28, 2025
- Low3.5The WP-Recall WordPress plugin before 16.26.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiteCheck if you run itEPSS 0.27%Apr 28, 2025
- Medium5.3The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offereCheck if you run itEPSS 0.39%Apr 28, 2025
- Medium6.0SEPPmail through 12.1.17 allows command injection within the Admin Portal.Check if you run itEPSS 1.06%Apr 28, 2025
- Medium5.3A vulnerability was found in dazhouda lecms 3.0.3.Check if you run itEPSS 0.52%Apr 27, 2025
- Medium5.3A vulnerability was found in iteachyou Dreamer CMS up to 4.1.3.Check if you run itEPSS 0.37%Apr 27, 2025
- Medium6.9A vulnerability was found in ScriptAndTools eCommerce-website-in-PHP 3.0 and classified as problematic.Check if you run itEPSS 0.77%Apr 27, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.66%Apr 27, 2025
- Medium5.1A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0.Check if you run itEPSS 0.41%Apr 27, 2025
- High8.8The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wep_opcoes' function in aCheck if you run itEPSS 0.46%Apr 26, 2025
- High7.2The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_valCheck if you run itEPSS 0.76%Apr 26, 2025
- High7.6Dify is an open-source LLM app development platform.Check if you run itEPSS 0.34%Apr 25, 2025
- Critical9.8The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to,Check if you run itEPSS 0.46%Apr 25, 2025
Sort