Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.2.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Tectite Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Remove meta boxes per user role plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.01.Check if you run itEPSS 0.20%Jun 2, 2026
- Medium4.3The BirdSeed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.19%Jun 2, 2026
- Low2.0A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3.Check if you run itEPSS 0.23%Jun 2, 2026
- Low2.1A flaw has been found in DedeCMS 5.7.88.Check if you run itEPSS 0.20%Jun 2, 2026
- Low1.3A security flaw has been discovered in Open5GS up to 2.7.6.Check if you run itEPSS 0.22%Jun 2, 2026
- Low1.9A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2.Check if you run itEPSS 0.25%Jun 2, 2026
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.77%Jun 2, 2026
- Medium4.3eLabFTW is an open source electronic lab notebook.Check if you run itEPSS 0.31%Jun 1, 2026
- Low2.9A security vulnerability has been detected in SGLang 0.5.10.post1.Check if you run itEPSS 0.37%Jun 1, 2026
- Medium6.7Memory corruption in windows drivers while sending incorrect trusted application requestCheck if you run itEPSS 0.08%Jun 1, 2026
- Medium6.4Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.Check if you run itEPSS 0.06%Jun 1, 2026
- High8.8Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by injecting SQL code into the 'rib' parameter.Check if you run itEPSS 0.43%Jun 1, 2026
- Medium6.9ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests.Check if you run itEPSS 0.16%Jun 1, 2026
- High8.8WP AutoSuggest 0.24 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.34%Jun 1, 2026
- High8.8Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malici…Check if you run itEPSS 0.34%Jun 1, 2026
- High7.1No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eG…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zP…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.8Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.34%Jun 1, 2026
- Low2.3The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection.Check if you run itEPSS 0.16%Jun 1, 2026
- High7.0Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate B…Check if you run itEPSS 0.66%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private net…Check if you run itEPSS 0.49%Jun 1, 2026