Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copyiCheck this weekEPSS 21.00%Jun 9, 2025
- Unknownzeroshell zeroshell Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.56%Jun 8, 2025
- UnknownD-Link dir-878_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.41%Jun 7, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marvie Pons Pinterest Verify Meta Tag pinterest-verify-meta-tag allows StoredCheck if you run itEPSS 0.26%Jun 6, 2025
- Medium6.9A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check if you run itEPSS 0.51%Jun 6, 2025
- Medium6.9A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check if you run itEPSS 0.48%Jun 6, 2025
- Medium5.3A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check if you run itEPSS 0.41%Jun 5, 2025
- Medium5.3A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check if you run itEPSS 0.41%Jun 5, 2025
- Medium6.4The Simple Contact Form Plugin for WordPress – WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all verCheck if you run itEPSS 0.22%Jun 4, 2025
- Medium6.4The Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shorCheck if you run itEPSS 0.22%Jun 4, 2025
- Medium6.4The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcCheck if you run itEPSS 0.22%Jun 4, 2025
- Medium5.3Allows modifying some file metadata (e.g.Check this weekEPSS 77.00%Jun 3, 2025
- High7.5Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.Check if you run itEPSS 1.39%Jun 3, 2025
- High7.5Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.Check if you run itEPSS 0.94%Jun 3, 2025
- Medium6.4The Profile Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's user_meta and compare shortcodes in all versions up to, and including, 3.13.8Check if you run itEPSS 0.29%Jun 3, 2025
- Critical9.8The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3.Check if you run itEPSS 0.73%May 31, 2025
- High8.8The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permission_callback() function in versions 2.2.1 tCheck if you run itEPSS 0.43%May 31, 2025
- High8.8The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wp_ajax_wpgm_start_geojson_import() function in versions 0.3.4 toCheck if you run itEPSS 0.42%May 31, 2025
- Low3.1Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing auCheck this weekEPSS 24.00%May 30, 2025
- Medium6.5The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31.Check if you run itEPSS 0.22%May 30, 2025
- Medium4.2vLLM is an inference and serving engine for large language models (LLMs).Check this weekEPSS 32.00%May 29, 2025
- High8.8The Property plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the use of the property_package_user_role metadata in versions 1.0.5 toCheck this weekEPSS 44.00%May 27, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in svil4ok Meta Keywords & Description wp-meta-keywords-meta-dCheck if you run itEPSS 0.66%May 23, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allowsCheck if you run itEPSS 0.40%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Khaled User Meta user-meta allows Reflected XSS.This issue affects User Meta:Check if you run itEPSS 0.28%May 23, 2025