Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.96%May 13, 2026
- Medium6.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.69%May 13, 2026
- High7.5Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.42%May 13, 2026
- High7.5Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.41%May 13, 2026
- High8.8Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.52%May 13, 2026
- Medium4.4Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.16%May 13, 2026
- High8.6Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.50%May 13, 2026
- Medium5.1Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by exploi…Check if you run itEPSS 0.24%May 13, 2026
- Medium5.1Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted cont…Check if you run itEPSS 0.31%May 13, 2026
- High8.8Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injec…Check if you run itEPSS 0.27%May 13, 2026
- Medium5.1Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into…Check if you run itEPSS 0.14%May 13, 2026
- Medium6.8WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the…Check if you run itEPSS 0.25%May 13, 2026
- High8.8The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.2 via the 'path' parameter of the…Check if you run itEPSS 0.82%May 13, 2026
- High8.1The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.Check if you run itEPSS 0.83%May 13, 2026
- Unknowne-office e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 32.90%May 13, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.18%May 12, 2026
- Critical9.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.36%May 12, 2026
- High8.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.20%May 12, 2026
- Critical9.4Scramble generates API documentation for Laravel project.Check if you run itEPSS 3.87%May 12, 2026
- High7.5PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.49%May 12, 2026
- High7.5PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.49%May 12, 2026
- High7.1Craft CMS is a content management system (CMS).Check if you run itEPSS 0.36%May 12, 2026
- High7.5phpseclib is a PHP secure communications library.Check if you run itEPSS 0.34%May 12, 2026
- High8.0An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.Check if you run itEPSS 0.33%May 12, 2026
- Medium4.3The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.19%May 12, 2026