Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services:Check if you run itEPSS 0.25%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in NTC WP Page Loading wp-page-loading allows Cross Site Request Forgery.This issue affects WP Page Loading: from n/a through <= 1.0Check if you run itEPSS 0.16%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in sminozzi WP Tools wptools allows Cross Site Request Forgery.This issue affects WP Tools: from n/a through <= 5.24.Check if you run itEPSS 0.16%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Anton Vanyukov Market Exporter market-exporter allows Cross Site Request Forgery.This issue affects Market Exporter: from n/a thrCheck if you run itEPSS 0.16%Jun 6, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This iCheck if you run itEPSS 0.15%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request Forgery.This issue affects Everest Backup: from n/a throughCheck if you run itEPSS 0.16%Jun 6, 2025
- High7.4Cross-Site Request Forgery (CSRF) vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects POEditor: from n/a through <= 0.9.10.Check if you run itEPSS 0.19%Jun 6, 2025
- High8.3Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.25%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Cross Site Request Forgery.This iCheck if you run itEPSS 0.14%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects DyCheck if you run itEPSS 0.14%Jun 6, 2025
- High8.7A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 6.42%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.76%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.76%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.97%Jun 6, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical.Check if you run itEPSS 0.97%Jun 6, 2025
- Medium5.4The Hive Support | AI-Powered Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inCheck if you run itEPSS 0.17%Jun 6, 2025
- Medium5.1Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd..Check if you run itEPSS 0.14%Jun 6, 2025
- Medium4.3IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.Check if you run itEPSS 0.35%Jun 6, 2025
- Unknownwpdevart poll\,_survey\,_questionnaire_and_voting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 46.00%Jun 6, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a before 8.0.0.Check if you run itEPSS 0.14%Jun 5, 2025
- High8.7A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical.Check if you run itEPSS 0.76%Jun 5, 2025
- High8.7A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028.Check if you run itEPSS 0.76%Jun 5, 2025
- High8.8The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_Check if you run itEPSS 2.08%Jun 5, 2025
- Medium4.0An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23.Check if you run itEPSS 0.75%Jun 5, 2025
- Unknownreprisesoftware reprise_license_manager Direct Request ('Forced Browsing')Patch nowKEVEPSS 9.32%Jun 5, 2025
Sort