Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied…Check if you run itEPSS 0.44%Aug 19, 2026
- Low2.7The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notificatio…Check if you run itEPSS 0.30%Aug 19, 2026
- Low2.7The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing…Check if you run itEPSS 0.28%Aug 19, 2026
- High8.8The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to u…Check if you run itEPSS 0.54%Aug 19, 2026
- Medium4.7The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplie…Check if you run itEPSS 0.22%Aug 19, 2026
- Medium4.3The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any…Check if you run itEPSS 0.25%Aug 19, 2026
- Medium6.5The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level…Check if you run itEPSS 0.42%Aug 19, 2026
- High7.2The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and abov…Check if you run itEPSS 0.46%Aug 19, 2026
- Low2.7The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during s…Check if you run itEPSS 0.28%Aug 19, 2026
- High8.1The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different auth…Check if you run itEPSS 0.35%Aug 19, 2026
- High8.6The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.Check if you run itEPSS 0.45%Aug 19, 2026
- High8.5The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any rol…Check if you run itEPSS 0.32%Aug 19, 2026
- High8.1The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to…Check if you run itEPSS 1.08%Aug 19, 2026
- Medium5.5A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Medium5.5A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Medium5.5A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Critical10.0A flaw has been found in Comfast CF-N1-S 2.6.0.1.Check if you run itEPSS 1.02%Aug 19, 2026
- High8.6A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.79%Aug 19, 2026
- High8.6A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306.Check if you run itEPSS 0.79%Aug 19, 2026
- Medium6.9A vulnerability was found in SPLWare esProc up to 20260507.Check if you run itEPSS 0.56%Aug 19, 2026
- Medium5.5A vulnerability has been found in code-projects Online Job Portal System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Low2.1A flaw has been found in TRENDnet Router 1.1.02b01.Check if you run itEPSS 1.82%Aug 19, 2026
- Medium6.4The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all vers…Check if you run itEPSS 0.41%Aug 19, 2026
- Critical9.1A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-mid…Check if you run itEPSS 0.32%Aug 19, 2026
- Low2.1A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01.Check if you run itEPSS 1.82%Aug 19, 2026
Sort