Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Missing Authorization vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce.This issue affects Mollie Payments for WooCommerce: from n/a through <Check if you run itEPSS 0.29%Jul 2, 2025
- High8.8The target device exposes a service on a specific TCP port with a configured endpoint.Check if you run itEPSS 0.63%Jul 2, 2025
- Medium6.5Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections.Check if you run itEPSS 0.39%Jul 2, 2025
- Medium6.4The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+modal' widget in all versions up to, andCheck if you run itEPSS 0.27%Jul 2, 2025
- Medium6.5Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands.Check if you run itEPSS 0.53%Jul 2, 2025
- High7.5A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.Check if you run itEPSS 0.59%Jul 2, 2025
- High7.0The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem comCheck if you run itEPSS 0.15%Jul 2, 2025
- Low2.0Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resourceCheck if you run itEPSS 0.54%Jul 2, 2025
- Low3.3The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the MobiCheck if you run itEPSS 0.14%Jul 2, 2025
- Medium6.4Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, which authenticated admin user can, in theory, potentially useCheck if you run itEPSS 0.18%Jul 2, 2025
- High7.1Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all physical boards after performing a single login to the baseband system board.Check if you run itEPSS 0.21%Jul 2, 2025
- Medium6.4The Single RAN baseband OAM service is intended to run as an unprivileged service.Check if you run itEPSS 0.15%Jul 2, 2025
- Medium6.4Sending a crafted SOAP "provision" operation message PlanId field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause path traCheck if you run itEPSS 0.28%Jul 2, 2025
- Medium6.4Sending a crafted SOAP "provision" operation message archive field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause path trCheck if you run itEPSS 0.27%Jul 2, 2025
- Medium4.2Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OCheck if you run itEPSS 0.20%Jul 2, 2025
- Critical9.8The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the 'themerex_callbacCheck if you run itEPSS 0.60%Jul 2, 2025
- Medium5.3The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive InformatCheck if you run itEPSS 0.38%Jul 2, 2025
- High7.5The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.44.2 viaCheck if you run itEPSS 0.57%Jul 2, 2025
- Low2.1Cross-site request forgery vulnerability exists in Active! mail 6 BuildInfo: 6.60.06008562 and earlier.Check if you run itEPSS 0.15%Jul 2, 2025
- Medium5.1Cross-site scripting vulnerability exists in Active! mail 6 BuildInfo: 6.30.01004145 to 6.60.06008562.Check if you run itEPSS 0.23%Jul 2, 2025
- High8.8The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in thCheck this weekEPSS 15.07%Jul 2, 2025
- High7.5scripteo ads_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.37%Jul 2, 2025
- Medium6.1The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmp_reset_password_token parameters in all versions up tCheck if you run itEPSS 0.24%Jul 2, 2025
- High8.8The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wp_rem_cs_widget_file_deCheck if you run itEPSS 0.81%Jul 2, 2025
- None0.0** REJECT ** DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryJul 2, 2025
Sort