Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2.Check if you run itEPSS 0.17%May 3, 2026
- Low1.3A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2.Check if you run itEPSS 0.27%May 3, 2026
- Medium5.5A vulnerability was determined in code-projects Online Hospital Management System 1.0.Check if you run itEPSS 0.43%May 2, 2026
- Medium5.5A vulnerability has been found in innocommerce InnoShop up to 0.7.8.Check if you run itEPSS 0.69%May 2, 2026
- Low2.0A vulnerability was determined in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.33%May 2, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- High8.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5.Check if you run itEPSS 0.62%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.32%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.30%May 2, 2026
- Critical9.8The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46.Check if you run itEPSS 0.84%May 2, 2026
- Medium5.5A weakness has been identified in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.41%May 1, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the joinOn function in BuildHelper.php.Check if you run itEPSS 0.33%May 1, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the data function in BuildHelper.php.Check if you run itEPSS 0.33%May 1, 2026
- Critical9.8Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 0.70%May 1, 2026
- Critical9.8Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 0.70%May 1, 2026
- High8.1Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 1.91%May 1, 2026
- High8.4Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 0.48%May 1, 2026
- Medium4.9SQL Injection via ORDER BY clause in V2Board thru 1.7.4.Check if you run itEPSS 0.42%May 1, 2026
- High7.5Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4.Check if you run itEPSS 0.43%May 1, 2026
- Medium4.8Cross-Site Scripting (XSS) in V2Board thru 1.7.4.Check if you run itEPSS 0.29%May 1, 2026
- High8.8The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2.Check if you run itEPSS 0.26%May 1, 2026
- Low2.0A weakness has been identified in MacCMS Pro up to 2022.1.3.Check if you run itEPSS 0.38%May 1, 2026
- Critical9.8The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0.Check if you run itEPSS 2.93%May 1, 2026
- Medium5.5A vulnerability was identified in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.41%May 1, 2026
- Low2.0A vulnerability was found in code-projects Gym Management System 1.0.Check if you run itEPSS 0.33%May 1, 2026