Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was determined in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- High8.7A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands.Check if you run itEPSS 0.27%Aug 15, 2025
- High8.5A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered.Check if you run itEPSS 0.32%Aug 15, 2025
- Critical9.2An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered.Check if you run itEPSS 0.40%Aug 15, 2025
- Medium6.9A vulnerability was found in projectworlds Travel Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability has been found in projectworlds Visitor Management System 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- High8.7A vulnerability was identified in Tenda AC20 16.03.08.12.Check if you run itEPSS 0.86%Aug 15, 2025
- Medium5.7There is an unauthorized access vulnerability in ZTE F50.Check if you run itEPSS 0.27%Aug 15, 2025
- Medium6.9A flaw has been found in code-projects Online Medicine Guide 1.0.Check if you run itEPSS 0.44%Aug 15, 2025
- Medium6.9A vulnerability has been found in code-projects Online Medicine Guide 1.0.Check if you run itEPSS 0.57%Aug 15, 2025
- Medium6.9A vulnerability was identified in D-Link DIR-860L 2.04.B04.Check if you run itEPSS 3.56%Aug 15, 2025
- Medium5.3A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0.Check if you run itEPSS 0.36%Aug 15, 2025
- Medium6.9A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Aug 15, 2025
- High8.7A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44.Check if you run itEPSS 0.86%Aug 15, 2025
- Medium6.4The Radius Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘subHeadingTagName’ parameter in all versions up to, and including, 2.2.1 due to insuffiCheck if you run itEPSS 0.25%Aug 15, 2025
- Medium6.3The Inpersttion For Theme plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the theme_section_shortcode() function.Check if you run itEPSS 0.36%Aug 15, 2025
- Medium6.5The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient esCheck if you run itEPSS 0.33%Aug 15, 2025
- Medium6.4The Plugin README Parser plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘target’ parameter in all versions up to, and including, 1.3.15 due to insufficieCheck if you run itEPSS 0.25%Aug 15, 2025
- Medium6.4The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.25%Aug 15, 2025
- Medium4.3The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the add_single_eventon and add_eventon shortcodes dueCheck if you run itEPSS 0.43%Aug 15, 2025
- Medium4.4The Alobaidi Captcha plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.3 due to insufficient inputCheck if you run itEPSS 0.26%Aug 15, 2025
- Critical9.8The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the delete_files() function inCheck if you run itEPSS 0.70%Aug 15, 2025
- Medium6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.16%Aug 15, 2025
- High7.5The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.Check if you run itEPSS 0.55%Aug 15, 2025
- High7.5The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.0.53 via the 'bizcalv' shortcode.Check if you run itEPSS 0.80%Aug 15, 2025
Sort