Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.38%Jun 6, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.36%Jun 6, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-graCheck if you run itEPSS 0.22%Jun 6, 2025
- Medium5.3In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS).Check if you run itEPSS 0.33%Jun 6, 2025
- Medium5.3Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.38%Jun 6, 2025
- High8.5Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2.Check if you run itEPSS 0.38%Jun 6, 2025
- High8.7Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.39%Jun 6, 2025
- Critical9.0Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHPCheck if you run itEPSS 0.68%Jun 6, 2025
- Medium5.4Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ResCheck if you run itEPSS 0.25%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Cross Site Request Forgery.This iCheck if you run itEPSS 0.14%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-eCheck if you run itEPSS 0.20%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Wishlist wishlist allows Stored XSS.This issue affects Wishlist: fCheck if you run itEPSS 0.20%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Abu Huraira Bin Aman WidgetKit widgetkit-for-elementor allows Stored XSS.ThisCheck if you run itEPSS 0.20%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oceanwp Ocean Extra ocean-extra allows Stored XSS.This issue affects Ocean ExtCheck if you run itEPSS 0.21%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Stored XSS.This issue affects Nasa Core:Check if you run itEPSS 0.21%Jun 6, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul BP Monitoring Management System 1.0.Check if you run itEPSS 0.43%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects DyCheck if you run itEPSS 0.14%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in QuickcabWP QuickCab.This issue affects QuickCab: from n/a through 1.3.3.Check if you run itEPSS 0.26%Jun 6, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1.Check if you run itEPSS 0.51%Jun 6, 2025
- Medium6.9A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0.Check if you run itEPSS 0.44%Jun 6, 2025
- Medium5.1A vulnerability was found in code-projects Traffic Offense Reporting System 1.0.Check if you run itEPSS 0.32%Jun 6, 2025
- Medium6.9A vulnerability was found in code-projects Real Estate Property Management System 1.0.Check if you run itEPSS 0.58%Jun 6, 2025
- Medium6.9A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0.Check if you run itEPSS 0.44%Jun 6, 2025
- High8.8A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without priCheck if you run itEPSS 0.37%Jun 6, 2025
- High8.8An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote atCheck if you run itEPSS 0.39%Jun 6, 2025
Sort