Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbit…Check if you run itEPSS 0.65%May 16, 2026
- High8.7TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upl…Check if you run itEPSS 0.32%May 16, 2026
- Medium5.1WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the parameter.Check if you run itEPSS 0.21%May 16, 2026
- High8.5VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges.Check if you run itEPSS 0.12%May 16, 2026
- High8.7Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.Check if you run itEPSS 0.28%May 16, 2026
- High8.7Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long ch…Check if you run itEPSS 0.28%May 16, 2026
- High8.7My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.Check if you run itEPSS 0.28%May 16, 2026
- High8.7Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings.Check if you run itEPSS 0.28%May 16, 2026
- High8.7Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.Check if you run itEPSS 0.28%May 16, 2026
- Medium5.1Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unsanitized inp…Check if you run itEPSS 0.20%May 16, 2026
- High8.8EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.28%May 16, 2026
- Medium5.1CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files throu…Check if you run itEPSS 0.17%May 16, 2026
- High8.8LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search_query parameter.Check if you run itEPSS 0.24%May 16, 2026
- Critical9.3python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON paylo…Check if you run itEPSS 0.70%May 16, 2026
- High8.7Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversi…Check if you run itEPSS 0.50%May 16, 2026
- Medium6.9MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user p…Check if you run itEPSS 0.23%May 16, 2026
- High8.5Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the…Check if you run itEPSS 0.11%May 16, 2026
- Medium6.9Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the downl…Check if you run itEPSS 0.67%May 16, 2026
- High8.7Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attackers to access files outside the web root by in…Check if you run itEPSS 0.50%May 16, 2026
- High8.8Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…Check if you run itEPSS 0.28%May 16, 2026
- High8.8Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL querie…Check if you run itEPSS 0.28%May 16, 2026
- High8.8Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co…Check if you run itEPSS 0.28%May 16, 2026
- Medium6.9bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visitin…Check if you run itEPSS 0.15%May 16, 2026
- Medium5.1Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user cr…Check if you run itEPSS 0.24%May 16, 2026
- Critical9.3libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks.Check if you run itEPSS 0.46%May 16, 2026
Sort