Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.79%May 16, 2025
- Medium4.3A denial-of-service vulnerability has been identified in the libsoup HTTP client library.Check if you run itEPSS 0.40%May 16, 2025
- Medium6.9A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical.Check if you run itEPSS 0.75%May 16, 2025
- Medium6.9A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical.Check if you run itEPSS 0.80%May 16, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.80%May 16, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.80%May 16, 2025
- Medium6.9A vulnerability classified as critical was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.80%May 16, 2025
- Medium5.3A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0.Check if you run itEPSS 0.53%May 16, 2025
- Medium4.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in redqteam Wishlist wishlist allows Retrieve Embedded Sensitive Data.This issue affects WiCheck if you run itEPSS 0.35%May 16, 2025
- Medium5.3Missing Authorization vulnerability in themeton Rozario allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.32%May 16, 2025
- Medium4.3Missing Authorization vulnerability in redqteam Wishlist wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist: from n/a throCheck if you run itEPSS 0.29%May 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in themeton Seven Stars allows Cross Site Request Forgery.Check if you run itEPSS 0.21%May 16, 2025
- Medium5.3Missing Authorization vulnerability in themeton Acerola acerola allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acerola: from n/a throughCheck if you run itEPSS 0.43%May 16, 2025
- Medium5.3Missing Authorization vulnerability in themeton The Business allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.33%May 16, 2025
- Medium5.3Missing Authorization vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.32%May 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in themeton Spare allows Cross Site Request Forgery.Check if you run itEPSS 0.21%May 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows SQL Injection.This issueCheck if you run itEPSS 0.44%May 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup UberSlider uber-classic allows SQL Injection.This issue affects UCheck if you run itEPSS 0.44%May 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allCheck if you run itEPSS 0.44%May 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Ultimate Tours Builder WP_UltimateToursBuilder allows Cross Site Request Forgery.This issue affects WP Ultimate Tours BCheck if you run itEPSS 0.17%May 16, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilder allows Cross Site Request Forgery.This issue afCheck if you run itEPSS 0.16%May 16, 2025
- Medium5.4Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.33%May 16, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Stored XSS.This issue affects CSS3 Accordions for WordPress: frCheck if you run itEPSS 0.14%May 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multimedia Responsive Carousel with Image Video Audio Support mulCheck if you run itEPSS 0.34%May 16, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows SQLCheck if you run itEPSS 0.34%May 16, 2025
Sort