Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.15%Oct 3, 2025
- Medium4.3The PayPal Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.15%Oct 3, 2025
- Medium4.3The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.14%Oct 3, 2025
- Medium6.1The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.16%Oct 3, 2025
- Medium4.3The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.13%Oct 3, 2025
- Medium4.3The Comment Info Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5.Check if you run itEPSS 0.15%Oct 3, 2025
- Medium6.5A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title.Check if you run itEPSS 0.46%Oct 3, 2025
- High7.1WeGIA is an open source web manager with a focus on charitable institutions.Check if you run itEPSS 0.17%Oct 2, 2025
- Low1.8CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- Medium6.9Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03.Check if you run itEPSS 0.24%Oct 2, 2025
- Critical9.3SQL injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 0.35%Oct 2, 2025
- Critical9.3SQL injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 0.35%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.27%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.38%Oct 2, 2025
- Critical9.3Operating system command injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 1.50%Oct 2, 2025
- Medium5.1Incorrect Cross-Origin Resource Sharing (CORS) configuration in Hiberus Sintra.Check if you run itEPSS 0.33%Oct 2, 2025
- Medium5.9Exposure of sensitive information in Viday.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.7Exposure of sensitive information in Viday.Check if you run itEPSS 0.34%Oct 2, 2025
- Medium6.9Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafteCheck if you run itEPSS 0.34%Oct 2, 2025
- High7.5Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTCheck if you run itEPSS 0.13%Oct 2, 2025
- Medium6.5VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forgery in fileLoader.jsp.Check if you run itEPSS 0.38%Oct 2, 2025
Sort