Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical.Check if you run itEPSS 0.46%May 1, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0.Check if you run itEPSS 0.46%May 1, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0.Check if you run itEPSS 0.46%May 1, 2025
- Medium6.4The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link iconsCheck if you run itEPSS 0.30%May 1, 2025
- Medium6.4The Nautic Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'np_marinetraffic_map' shortcode in all versions up to, and including, 2.0 due tCheck if you run itEPSS 0.24%May 1, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0.Check if you run itEPSS 0.56%May 1, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0.Check if you run itEPSS 0.36%May 1, 2025
- Low3.5The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site SCheck if you run itEPSS 0.27%May 1, 2025
- Medium4.5The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site SCheck if you run itEPSS 0.29%May 1, 2025
- Low3.5The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site SCheck if you run itEPSS 0.31%May 1, 2025
- Low3.5The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoredCheck if you run itEPSS 0.27%May 1, 2025
- Medium6.9A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0.Check if you run itEPSS 0.56%May 1, 2025
- High8.7A vulnerability was found in Netgear EX6200 1.0.3.94.Check if you run itEPSS 1.63%May 1, 2025
- High8.1The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capabilCheck if you run itEPSS 0.43%May 1, 2025
- Medium5.5The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_WebCheck if you run itEPSS 0.25%May 1, 2025
- Medium6.4The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'list_children' shortcode in all versions up to, and including, 2.1 due to insuCheck if you run itEPSS 0.27%May 1, 2025
- High8.7A vulnerability was found in Netgear EX6200 1.0.3.94.Check if you run itEPSS 1.69%May 1, 2025
- Medium4.3The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerabCheck if you run itEPSS 0.20%May 1, 2025
- High8.8The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4.Check if you run itEPSS 0.39%May 1, 2025
- High8.8The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the newsblogger_install_and_activate_plugin() function in all versiCheck if you run itEPSS 1.14%May 1, 2025
- High8.7A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical.Check if you run itEPSS 1.69%May 1, 2025
- High8.1The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_mesCheck if you run itEPSS 0.36%May 1, 2025
- High8.7A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical.Check if you run itEPSS 1.16%May 1, 2025
- High8.7A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94.Check if you run itEPSS 1.49%May 1, 2025
- Medium5.3PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp .Check if you run itEPSS 0.57%May 1, 2025
Sort