Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager user-profile-meta allows Privilege Escalation.This issue affects User Profile Meta Manager:Check if you run itEPSS 0.25%May 19, 2025
- High7.5Multer is a node.js middleware for handling .Check if you run itEPSS 0.80%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ktsvetkov wp-cyr-cho wp-cyr-cho allows Cross Site Request Forgery.This issue affects wp-cyr-cho: from n/a through <= 0.1.Check if you run itEPSS 0.15%May 19, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ref CheckBot checkbot allows Stored XSS.This issue affects CheckBot: from n/a through <= 1.05.Check if you run itEPSS 0.14%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Ashok G Easy Child Theme Creator easy-child-theme-creator allows Cross Site Request Forgery.This issue affects Easy Child Theme CCheck if you run itEPSS 0.15%May 19, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in aseem1234 Best Posts Summary best-posts-summary allows Stored XSS.This issue affects Best Posts Summary: from n/a through <= 1.0.Check if you run itEPSS 0.14%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking systeCheck if you run itEPSS 0.15%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ed4becky Rootspersona rootspersona allows Cross Site Request Forgery.This issue affects Rootspersona: from n/a through <= 3.7.5.Check if you run itEPSS 0.15%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce woo-dynamic-pricing-discounts-lite allows Cross Site Request FoCheck if you run itEPSS 0.15%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through <=Check if you run itEPSS 0.15%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Cross Site Request Forgery.This issue affects Japanized ForCheck if you run itEPSS 0.15%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Pektsekye Year Make Model Search for WooCommerce ymm-search allows Cross Site Request Forgery.This issue affects Year Make ModelCheck if you run itEPSS 0.15%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in artiosmedia Product Code for WooCommerce product-code-for-woocommerce allows Cross Site Request Forgery.This issue affects ProducCheck if you run itEPSS 0.15%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Juan Carlos WP Mapa Politico España wp-mapa-politico-spain allows Cross Site Request Forgery.This issue affects WP Mapa PoliticoCheck if you run itEPSS 0.15%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects BrCheck if you run itEPSS 0.19%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in sminozzi reCAPTCHA for all recaptcha-for-all allows Cross Site Request Forgery.This issue affects reCAPTCHA for all: from n/a thrCheck if you run itEPSS 0.17%May 19, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in awcode AWcode Toolkit awcode-toolkit allows Stored XSS.This issue affects AWcode Toolkit: from n/a through <= 1.0.18.Check if you run itEPSS 0.15%May 19, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in affmngr Affiliates Manager Google reCAPTCHA Integration affiliates-manager-google-recaptcha-integration allows Stored XSS.This isCheck if you run itEPSS 0.15%May 19, 2025
- Critical9.2Server-side request forgery vulnerability exists in a-blog cms multiple versions.Check if you run itEPSS 0.51%May 19, 2025
- Medium6.5A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using instead of the required .Check if you run itEPSS 0.51%May 19, 2025
- Medium6.5EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function.Check if you run itEPSS 0.50%May 19, 2025
- High8.7A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13.Check if you run itEPSS 6.43%May 18, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.35%May 18, 2025
- High8.7A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.Check if you run itEPSS 0.85%May 17, 2025
- High8.7A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.Check if you run itEPSS 0.85%May 17, 2025
Sort