Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 th…Check if you run itEPSS 0.21%Apr 8, 2026
- Critical9.8WPEverest everest_forms Deserialization of Untrusted DataPatch nowKEVEPSS 2.98%Apr 8, 2026
- Medium5.4The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider…Check if you run itEPSS 0.32%Apr 7, 2026
- High7.5FastFeedParser is a high performance RSS, Atom and RDF parser.Check if you run itEPSS 0.50%Apr 7, 2026
- High7.7OpenObserve is a cloud-native observability platform.Check if you run itEPSS 0.36%Apr 7, 2026
- Medium6.9OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the task polling endpoints that allows unauthorized attackers to enumerate or retri…Check if you run itEPSS 0.38%Apr 7, 2026
- High7.5File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 2.38%Apr 7, 2026
- High7.2Emissary is a P2P based data-driven workflow engine.Check if you run itEPSS 0.90%Apr 7, 2026
- Medium5.0LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.30%Apr 7, 2026
- High7.5text-generation-webui is an open-source web interface for running Large Language Models.Check if you run itEPSS 0.44%Apr 7, 2026
- Critical9.8Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution.Check if you run itEPSS 1.80%Apr 7, 2026
- Medium4.3Papra is a minimalistic document management and archiving platform.Check if you run itEPSS 0.30%Apr 7, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.39%Apr 6, 2026
- High7.7pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.36%Apr 6, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.38%Apr 6, 2026
- High7.2Ech0 is an open-source, self-hosted publishing platform for personal idea sharing.Check if you run itEPSS 0.72%Apr 6, 2026
- Medium5.4vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.30%Apr 6, 2026
- High8.6curl_cffi is the a Python binding for curl.Check if you run itEPSS 0.45%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Apr 6, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into th…Check if you run itEPSS 0.66%Apr 5, 2026
- Medium6.4The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the su_carousel shortcode in all versions up to, a…Check if you run itEPSS 0.35%Apr 4, 2026
- High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassCheck if you run itEPSS 0.34%Apr 4, 2026
- High8.6PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.41%Apr 3, 2026
- High8.6prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across…Check if you run itEPSS 0.33%Apr 3, 2026
- High8.7prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata gene…Check if you run itEPSS 0.28%Apr 3, 2026