Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection.Check if you run itEPSS 0.30%Jun 2, 2026
- High7.5Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.25%Jun 2, 2026
- High7.5Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.20%Jun 2, 2026
- High8.1Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection.Check if you run itEPSS 0.31%Jun 2, 2026
- High8.1Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection.Check if you run itEPSS 0.31%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion.Check if you run itEPSS 0.41%Jun 2, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local F…Check if you run itEPSS 0.30%Jun 2, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion.Check if you run itEPSS 0.41%Jun 2, 2026
- High8.1A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_…Check if you run itEPSS 4.86%Jun 2, 2026
- Medium5.4The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to…Check if you run itEPSS 0.13%Jun 2, 2026
- Medium6.5Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite.Check if you run itEPSS 0.44%Jun 2, 2026
- Medium4.3An improper authorization vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.29%Jun 2, 2026
- Medium5.1Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling of the locale parameter across multiple endpoints.Check if you run itEPSS 0.29%Jun 2, 2026
- Critical9.3Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE).Check if you run itEPSS 0.56%Jun 2, 2026
- Medium5.3LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks result…Check if you run itEPSS 0.27%Jun 2, 2026
- Medium4.3Missing Authorization vulnerability in ThimPress Thim Core allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.15%Jun 2, 2026
- High8.8Missing Authorization vulnerability in ThimPress Thim Core thim-core.This issue affects Thim Core: from n/a through 2.3.3.Check if you run itEPSS 0.24%Jun 2, 2026
- Medium5.3Missing Authorization vulnerability in Anton Shevchuk Constructor allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.19%Jun 2, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation.Check if you run itEPSS 0.27%Jun 2, 2026
- Medium6.5Missing Authorization vulnerability in Printeers Printeers Print & Ship allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.17%Jun 2, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UnboundStudio Accordion FAQ allows Reflected XSS.Check if you run itEPSS 0.15%Jun 2, 2026
- Medium4.3The Remove NoFollow Commenter URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Jun 2, 2026
- Medium4.3The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.2.Check if you run itEPSS 0.13%Jun 2, 2026
- Medium4.3The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5.Check if you run itEPSS 0.13%Jun 2, 2026
- Medium4.3The Tectite Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Jun 2, 2026
Sort