Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The FundPress – WordPress Donation Plugin for WordPress is vulnerable to authorization bypass in versions up to and including 2.0.8.Check if you run itEPSS 0.40%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Consent field hidden inputs in versions up to and including 2.10.0.Check if you run itEPSS 0.24%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.23%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.25%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.25%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.24%May 2, 2026
- High8.8The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.8 via the function.Check if you run itEPSS 0.66%May 2, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.21%May 2, 2026
- Critical9.8The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46.Check if you run itEPSS 0.58%May 2, 2026
- High8.8The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmg_save_provider_config AJAX action in all vers…Check if you run itEPSS 0.40%May 2, 2026
- UnknownHeap-use-after-free in insertkeyOpen the advisoryMay 2, 2026
- Low2.1A vulnerability was found in mem0ai mem0 up to 1.0.11.Check if you run itEPSS 0.32%May 1, 2026
- Low2.1A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.Check if you run itEPSS 0.24%May 1, 2026
- Medium5.5A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1.0.Check if you run itEPSS 1.50%May 1, 2026
- Medium6.3Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections.Check if you run itEPSS 0.45%May 1, 2026
- Medium6.3Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers.Check if you run itEPSS 0.52%May 1, 2026
- Medium5.5A weakness has been identified in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- Medium5.5A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435855f18af3373.Check if you run itEPSS 1.50%May 1, 2026
- Medium5.5A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6.Check if you run itEPSS 0.45%May 1, 2026
- High8.4flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function.Check if you run itEPSS 0.14%May 1, 2026
- Medium5.5A vulnerability was found in ggerve coding-standards-mcp.Check if you run itEPSS 0.45%May 1, 2026
- Medium4.4An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field.Check if you run itEPSS 0.11%May 1, 2026
- High7.5AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library.Check if you run itEPSS 0.31%May 1, 2026
- Critical9.8OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing.Check if you run itEPSS 0.25%May 1, 2026
- High7.5Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via…Check if you run itEPSS 0.31%May 1, 2026
Sort