Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Shipping for WooCommerce conditional-shipping-for-woocommerce allows Cross Site Request Forgery.This issue afCheck if you run itEPSS 0.26%Apr 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in EverAccounting Ever Accounting wp-ever-accounting allows Cross Site Request Forgery.This issue affects Ever Accounting: from n/aCheck if you run itEPSS 0.21%Apr 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for WooCommerce and QuickBooks wp-woocommerce-quickbooks allows Cross Site Request Forgery.This issue affecCheck if you run itEPSS 0.21%Apr 16, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a throughCheck if you run itEPSS 0.34%Apr 16, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in misstt123 oasys 1.0.Check if you run itEPSS 0.29%Apr 16, 2025
- Low3.0Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authenticated user to exfiCheck if you run itEPSS 0.29%Apr 16, 2025
- Medium5.3The WP STAGING Pro WordPress Backup Plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 6.1.2 due to missing capability checks on the getCheck if you run itEPSS 0.33%Apr 16, 2025
- Low2.2Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to enforce MFA checks in PUT /api/v4/users/user-id/mfa when the requesting user differs from the target user ID, which aCheck if you run itEPSS 0.24%Apr 16, 2025
- Medium6.1The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29.Check if you run itEPSS 0.32%Apr 16, 2025
- Low3.7In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.Check if you run itEPSS 0.53%Apr 16, 2025
- High8.8A remote code execution (RCE) vulnerability in the upload_file function of LRQA Nettitude PoshC2 after commit 123db87 allows authenticated attackers to execute arbitrary code via aCheck if you run itEPSS 0.94%Apr 16, 2025
- Critical9.6NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system.Check if you run itEPSS 0.60%Apr 15, 2025
- Medium5.3Ash Authentication provides authentication for the Ash framework.Check if you run itEPSS 0.32%Apr 15, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server.Check if you run itEPSS 0.24%Apr 15, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in RealMag777 InPost Gallery inpost-gallery allows Cross Site Request Forgery.This issue affects InPost Gallery: from n/a through <=Check if you run itEPSS 0.17%Apr 15, 2025
- High8.1Cross-Site Request Forgery (CSRF) vulnerability in looswebstudio Arkhe arkhe allows PHP Local File Inclusion.This issue affects Arkhe: from n/a through <= 3.12.0.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.9An unauthenticated attacker can get users' emails by knowing usernames.Check if you run itEPSS 0.50%Apr 15, 2025
- Low2.2Weblate is a web based localization tool.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium4.6Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.76%Apr 15, 2025
- Medium5.4gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services.Check if you run itEPSS 0.37%Apr 15, 2025
- High7.5The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF).Check if you run itEPSS 0.60%Apr 15, 2025
- High7.5This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPuCheck if you run itEPSS 0.76%Apr 15, 2025
- Medium5.3This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium4.3The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Cross Site Request Forgery.Check if you run itEPSS 0.15%Apr 15, 2025
Sort