Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.25%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium6.4The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in all versions up to, and including, 5.1.3.Check if you run itEPSS 0.51%Apr 8, 2026
- Medium6.4The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG Image Widget in versions up to and including 8.4.2.Check if you run itEPSS 0.36%Apr 8, 2026
- Medium6.5The WP Blockade plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 0.9.14.Check if you run itEPSS 0.47%Apr 8, 2026
- Critical9.8The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15.Patch nowKEVEPSS 1.31%Apr 8, 2026
- Medium4.7The Gravity Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in the AJAX action in all versions up to, and including, 2.9.30.Check if you run itEPSS 0.39%Apr 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Apr 8, 2026
- Critical9.0SiYuan is a personal knowledge management system.Check if you run itEPSS 0.65%Apr 7, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.38%Apr 7, 2026
- Medium5.3Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.Check if you run itEPSS 0.24%Apr 7, 2026
- Medium5.4Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.24%Apr 7, 2026
- Medium5.4Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.24%Apr 7, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.24%Apr 7, 2026
- High8.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.32%Apr 7, 2026
- Medium6.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.37%Apr 7, 2026
- Medium6.1SDL_image is a library to load images of various formats as SDL surfaces.Check if you run itEPSS 0.30%Apr 6, 2026
- Medium5.1OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScr…Check if you run itEPSS 0.22%Apr 6, 2026
- Medium5.3lichess.org is the forever free, adless and open source chess server.Check if you run itEPSS 0.35%Apr 6, 2026
- Medium5.3Hugo is a static site generator.Check if you run itEPSS 0.23%Apr 6, 2026
- Medium5.4Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.25%Apr 6, 2026
- Critical9.6BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.48%Apr 6, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.56%Apr 6, 2026
- Critical9.4CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.45%Apr 6, 2026
- Medium5.1Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs.Check if you run itEPSS 0.25%Apr 6, 2026