Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Casdoor versions 2.362.0 and earlier map SAML assertions to user sessions without replay protection.Check if you run itEPSS 0.37%May 28, 2026
- High8.7Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses…Check if you run itEPSS 0.40%May 28, 2026
- Medium6.0When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to th…Check if you run itEPSS 0.34%May 28, 2026
- Critical9.8A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR61…Check if you run itEPSS 1.77%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows unauthenticated attackers to reset any user account pa…Check if you run itEPSS 0.46%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to ch…Check if you run itEPSS 0.44%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation.Check if you run itEPSS 0.41%May 28, 2026
- Medium4.3The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14.Check if you run itEPSS 0.40%May 28, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthenticated privilege escalation in versions up to and including 3.29.2.Check if you run itEPSS 1.17%May 28, 2026
- Medium4.3The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) plugin for WordPress is vulnerable to Cross-Site Reque…Check if you run itEPSS 0.20%May 28, 2026
- Medium6.1The Easy Updates Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'paged' parameter in versions up to, and including, 9.0.20 This i…Check if you run itEPSS 0.35%May 28, 2026
- Medium5.3The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for Wor…Check if you run itEPSS 0.39%May 28, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'User-Agent' header in all versions up to, and including, 5.4.11 due t…Check if you run itEPSS 0.53%May 28, 2026
- High7.2The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file_upload' parameter in all v…Check if you run itEPSS 0.51%May 28, 2026
- High8.1The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object I…Check if you run itEPSS 0.37%May 28, 2026
- Medium6.4The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in the _filte…Check if you run itEPSS 0.36%May 28, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.90%May 28, 2026
- Medium4.3The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7.Check if you run itEPSS 0.20%May 28, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.38%May 28, 2026
- High7.3A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature.Check if you run itEPSS 0.49%May 28, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 28, 2026
- Medium4.3The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to a…Check if you run itEPSS 0.37%May 28, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.2.Check if you run itEPSS 0.75%May 28, 2026
- Critical9.0Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf…Check if you run itEPSS 0.48%May 28, 2026
- High8.6A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.Check if you run itEPSS 0.47%May 28, 2026