Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.34%Apr 22, 2026
- Medium4.3The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium5.3The CalJ plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.Check if you run itEPSS 0.42%Apr 22, 2026
- Medium6.4The Quran Live Multilanguage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cheikh' and 'lang' shortcode attributes in all versions up to,…Check if you run itEPSS 0.43%Apr 22, 2026
- Medium6.5Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with low privileges to modify art…Check if you run itEPSS 0.35%Apr 21, 2026
- Medium6.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.33%Apr 21, 2026
- High7.2Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.php.Check if you run itEPSS 0.86%Apr 21, 2026
- Critical9.3SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Check if you run itEPSS 0.16%Apr 21, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Check if you run itEPSS 1.02%Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Check if you run itEPSS 0.50%Apr 21, 2026
- Medium5.1Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki.Check if you run itEPSS 0.29%Apr 21, 2026
- Critical9.2Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler all…Check if you run itEPSS 0.91%Apr 20, 2026
- High8.7Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system…Check if you run itEPSS 0.83%Apr 20, 2026
- High8.1The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in all versions up to, and including, 3.4.4.Check if you run itEPSS 0.95%Apr 20, 2026
- High8.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5.Check if you run itEPSS 0.95%Apr 20, 2026
- Medium5.4Cross Site Scripting vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the visname parameter of visitors-form.php.Check if you run itEPSS 0.29%Apr 20, 2026
- High7.5SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgo…Check if you run itEPSS 0.49%Apr 20, 2026
- High8.2SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (f…Check if you run itEPSS 0.50%Apr 20, 2026
- Critical9.4SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page (index.php).Check if you run itEPSS 0.57%Apr 20, 2026
- High8.7Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.96%Apr 20, 2026
- High8.1Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.71%Apr 20, 2026
- Low2.0A weakness has been identified in Pagekit CMS up to 1.0.18.Check if you run itEPSS 0.41%Apr 20, 2026
- Low2.0A vulnerability was identified in Z-BlogPHP 1.7.5.Check if you run itEPSS 0.38%Apr 20, 2026
- Critical9.2Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.php con…Check if you run itEPSS 1.14%Apr 20, 2026