Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underl…Check if you run itEPSS 0.44%May 20, 2026
- High7.8Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.37%May 20, 2026
- Low2.3Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).Check if you run itEPSS 0.09%May 20, 2026
- Medium4.4Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a ve…Check if you run itEPSS 0.10%May 20, 2026
- High7.8Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEO…Check if you run itEPSS 0.13%May 20, 2026
- Critical9.3NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the 'orderby' parameter on the REST API endpoints '/imagely/v1/galleries' and…Check if you run itEPSS 0.37%May 20, 2026
- Medium4.3The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in…Check if you run itEPSS 0.20%May 20, 2026
- High8.8The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions…Check if you run itEPSS 0.44%May 20, 2026
- Medium5.3Missing authorization vulnerability exists in Movable Type.Check if you run itEPSS 0.33%May 20, 2026
- High8.2A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL.Check if you run itEPSS 0.28%May 20, 2026
- Medium5.4A stored cross-site scripting vulnerability has been found in the Talend Administration Center.Check if you run itEPSS 0.23%May 20, 2026
- High7.4mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager.Check if you run itEPSS 0.41%May 20, 2026
- Medium6.5The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versions up to, and including, 2.15.16.Check if you run itEPSS 0.41%May 20, 2026
- Medium6.1The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to insufficie…Check if you run itEPSS 0.36%May 20, 2026
- Medium4.3The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.40%May 20, 2026
- Medium4.3The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5.Check if you run itEPSS 0.20%May 20, 2026
- Medium6.1The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.3.Check if you run itEPSS 0.21%May 20, 2026
- Medium4.3The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.23%May 20, 2026
- Medium4.3The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.0.Check if you run itEPSS 0.20%May 20, 2026
- Medium4.9The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.5.7.Check if you run itEPSS 0.58%May 20, 2026
- High8.8The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7.Check if you run itEPSS 1.56%May 20, 2026
- Medium6.1The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.01.Check if you run itEPSS 0.37%May 20, 2026
- Critical9.8The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, an…Check if you run itEPSS 0.67%May 20, 2026
- High8.8The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.52%May 20, 2026