Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object I…Check if you run itEPSS 0.25%May 28, 2026
- Medium6.4The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in the _filte…Check if you run itEPSS 0.29%May 28, 2026
- High7.0A command injection vulnerability was discovered in the utility of RPM.Check if you run itEPSS 0.57%May 28, 2026
- Medium5.3A flaw was found in Keycloak's ClientRegistrationAuth component.Check if you run itEPSS 0.42%May 28, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.30%May 28, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.48%May 28, 2026
- Medium4.3A flaw was found in Keycloak, an open-source identity and access management solution.Check if you run itEPSS 0.38%May 28, 2026
- Medium5.5Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjection option which can be bypassed.Check if you run itEPSS 0.17%May 28, 2026
- Medium6.4The LiveSmart Video Chat Live Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livesmart_widget' shortcode in all version…Check if you run itEPSS 0.16%May 28, 2026
- High8.8The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filter…Check if you run itEPSS 0.45%May 28, 2026
- Medium4.3The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7.Check if you run itEPSS 0.14%May 28, 2026
- Medium6.5The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1.Check if you run itEPSS 0.24%May 28, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.22%May 28, 2026
- High7.3A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature.Check if you run itEPSS 0.35%May 28, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 28, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.16%May 28, 2026
- Medium6.5A flaw was found in Keycloak's Client Policies, specifically within the component.Check if you run itEPSS 0.27%May 28, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.21%May 28, 2026
- Medium4.3The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to a…Check if you run itEPSS 0.21%May 28, 2026
- Medium4.3The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via t…Check if you run itEPSS 0.22%May 28, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.2.Check if you run itEPSS 0.42%May 28, 2026
- Medium6.5The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9.Patch nowKEVEPSS 0.37%May 28, 2026
- Critical9.0Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf…Check if you run itEPSS 0.31%May 28, 2026
- Critical9.4This vulnerability in Veeam Service Provider Console allows for remote code execution.Check if you run itEPSS 0.52%May 28, 2026
- High8.6A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.Check if you run itEPSS 0.51%May 28, 2026
Sort