Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Eli ELI's Related Posts Footer Links and Widget spostarbust allows Stored XSS.This issue affects ELI's Related Posts Footer LinksCheck if you run itEPSS 0.15%May 7, 2025
- High7.4Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: fCheck if you run itEPSS 0.21%May 7, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Oliver Campion Display Remote Posts Block display-remote-posts-block allows Server Side Request Forgery.This issue affects DisplCheck if you run itEPSS 0.26%May 7, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Iulia Cazan Easy Replace Image easy-replace-image allows Server Side Request Forgery.This issue affects Easy Replace Image: fromCheck if you run itEPSS 0.22%May 7, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: fromCheck if you run itEPSS 0.16%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in senols GPT3 AI Content Writer gpt3-ai-content-generator allows Cross Site Request Forgery.This issue affects GPT3 AI Content WritCheck if you run itEPSS 0.17%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through <= 1.2.8.Check if you run itEPSS 0.17%May 7, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a throCheck if you run itEPSS 0.16%May 7, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through <= 1.3.1Check if you run itEPSS 0.22%May 7, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a throughCheck if you run itEPSS 0.19%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Roxnor FundEngine wp-fundraising-donation allows Cross Site Request Forgery.This issue affects FundEngine: from n/a through <= 1.Check if you run itEPSS 0.17%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request FoCheck if you run itEPSS 0.17%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Cross Site Request Forgery.This issue affects WP Hotel Booking: from n/a throuCheck if you run itEPSS 0.17%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Cross Site Request Forgery.This issue affects Cool Author Box: frCheck if you run itEPSS 0.17%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in listamester Listamester listamester allows Cross Site Request Forgery.This issue affects Listamester: from n/a through <= 2.3.6.Check if you run itEPSS 0.17%May 7, 2025
- High8.6Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3.Check if you run itEPSS 0.24%May 7, 2025
- High7.6Cross-Site Scripting vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via multiple components, including Strategic Planning PerCheck if you run itEPSS 0.43%May 7, 2025
- Critical9.1A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.Check this weekEPSS 22.35%May 6, 2025
- Low3.4FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts.Check if you run itEPSS 0.34%May 6, 2025
- High7.8Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.Check if you run itEPSS 0.11%May 6, 2025
- High7.8Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.Check if you run itEPSS 0.11%May 6, 2025
- High7.8Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.Check if you run itEPSS 0.11%May 6, 2025
- Medium6.6Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.Check if you run itEPSS 0.11%May 6, 2025
- Medium5.3A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01.Check this weekEPSS 24.02%May 6, 2025
- Medium5.3A vulnerability was found in MRCMS 3.1.2.Check if you run itEPSS 0.30%May 6, 2025
Sort