Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserActCheck if you run itEPSS 0.46%May 10, 2025
- Medium4.8A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0.Check if you run itEPSS 0.37%May 10, 2025
- High8.8The WordPress Review Plugin: The Ultimate Solution for Building a Review Website plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.Check if you run itEPSS 0.88%May 10, 2025
- Medium4.8A vulnerability was found in code-projects Simple Banking System up to 1.0.Check if you run itEPSS 0.40%May 10, 2025
- Medium6.4The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Button and Countdown Widgets in all versions up to, and including, 2.Check if you run itEPSS 0.45%May 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- None0.0Not usedOpen the advisoryMay 10, 2025
- High7.5IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization.Check if you run itEPSS 0.43%May 10, 2025
- Medium5.1A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic.Check if you run itEPSS 0.38%May 10, 2025
- Medium4.5libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c.Check if you run itEPSS 0.30%May 10, 2025
- Medium5.4The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the start_timestCheck if you run itEPSS 0.30%May 9, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0.Check if you run itEPSS 0.78%May 9, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0.Check if you run itEPSS 0.61%May 9, 2025
- Medium6.9A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0.Check if you run itEPSS 0.73%May 9, 2025
- Medium6.9A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0.Check if you run itEPSS 0.73%May 9, 2025
- High8.3code-server runs VS Code on any machine anywhere through browser access.Check this weekEPSS 44.54%May 9, 2025
- High7.0In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.Check if you run itEPSS 0.22%May 9, 2025
- Medium6.9A vulnerability was found in Campcodes Online Food Ordering System 1.0.Check if you run itEPSS 0.73%May 9, 2025
Sort