Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1DDEV is an open-source tool for running local web development environments for PHP and Node.js.Check if you run itEPSS 0.46%Apr 22, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Medium4.4The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Permanent keywords' field in all versio…Check if you run itEPSS 0.40%Apr 22, 2026
- Medium4.3The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.23%Apr 22, 2026
- High7.2The HTTP Headers plugin for WordPress is vulnerable to External Control of File Name or Path leading to Remote Code Execution in all versions up to and including 1.19.2.Check if you run itEPSS 1.55%Apr 22, 2026
- Medium6.1The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026
- Medium4.3The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.34%Apr 22, 2026
- Medium4.3The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium5.3The CalJ plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.Check if you run itEPSS 0.42%Apr 22, 2026
- Medium6.4The Quran Live Multilanguage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cheikh' and 'lang' shortcode attributes in all versions up to,…Check if you run itEPSS 0.43%Apr 22, 2026
- Medium6.5Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with low privileges to modify art…Check if you run itEPSS 0.35%Apr 21, 2026
- Medium6.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.33%Apr 21, 2026
- High7.2Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.php.Check if you run itEPSS 0.86%Apr 21, 2026
- Critical9.3SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Check if you run itEPSS 0.16%Apr 21, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Check if you run itEPSS 1.02%Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Check if you run itEPSS 0.50%Apr 21, 2026
- Medium5.1Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki.Check if you run itEPSS 0.29%Apr 21, 2026
- Critical9.2Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler all…Check if you run itEPSS 0.91%Apr 20, 2026
- High8.7Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system…Check if you run itEPSS 0.83%Apr 20, 2026
- High8.1The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in all versions up to, and including, 3.4.4.Check if you run itEPSS 0.95%Apr 20, 2026
- High8.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5.Check if you run itEPSS 0.95%Apr 20, 2026
- Medium5.4Cross Site Scripting vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the visname parameter of visitors-form.php.Check if you run itEPSS 0.29%Apr 20, 2026
- High7.5SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgo…Check if you run itEPSS 0.49%Apr 20, 2026
- High8.2SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (f…Check if you run itEPSS 0.50%Apr 20, 2026