Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This iCheck if you run itEPSS 0.15%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request Forgery.This issue affects Everest Backup: from n/a throughCheck if you run itEPSS 0.16%Jun 6, 2025
- High7.4Cross-Site Request Forgery (CSRF) vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects POEditor: from n/a through <= 0.9.10.Check if you run itEPSS 0.19%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Raychat: from n/a through <= 2.1.0Check if you run itEPSS 0.32%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Stored XSS.This issue affectsCheck if you run itEPSS 0.26%Jun 6, 2025
- Medium5.1A vulnerability was found in code-projects Laundry System 1.0.Check if you run itEPSS 0.32%Jun 6, 2025
- Medium5.1A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic.Check if you run itEPSS 0.32%Jun 6, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Mr.Check if you run itEPSS 0.46%Jun 6, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through < 1.1.13.Check if you run itEPSS 0.48%Jun 6, 2025
- Medium5.1A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical.Check if you run itEPSS 4.79%Jun 6, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.41%Jun 6, 2025
- High8.3Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.25%Jun 6, 2025
- Medium4.8Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.37%Jun 6, 2025
- Medium5.1In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS).Check if you run itEPSS 0.36%Jun 6, 2025
- Medium5.1Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.38%Jun 6, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.36%Jun 6, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-graCheck if you run itEPSS 0.22%Jun 6, 2025
- Medium5.3In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS).Check if you run itEPSS 0.33%Jun 6, 2025
- Medium5.3Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.38%Jun 6, 2025
- High8.5Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2.Check if you run itEPSS 0.38%Jun 6, 2025
- High8.7Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.39%Jun 6, 2025
- Critical9.0Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHPCheck if you run itEPSS 0.68%Jun 6, 2025
- Medium5.4Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ResCheck if you run itEPSS 0.25%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Cross Site Request Forgery.This iCheck if you run itEPSS 0.14%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-eCheck if you run itEPSS 0.20%Jun 6, 2025
Sort