Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.Check if you run itEPSS 0.39%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- Critical9.9Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.Check if you run itEPSS 0.48%Aug 18, 2026
- High7.2Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.Check if you run itEPSS 0.27%Aug 18, 2026
- High7.5Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.Check if you run itEPSS 0.39%Aug 18, 2026
- Critical9.8Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.Check if you run itEPSS 0.56%Aug 18, 2026
- High7.4ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser int…Check if you run itEPSS 0.34%Aug 18, 2026
- High7.7BetterDesk is a remote desktop management solution.Check if you run itEPSS 0.22%Aug 18, 2026
- High7.5Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.Check if you run itEPSS 0.42%Aug 18, 2026
- Medium6.0Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.Check if you run itEPSS 0.21%Aug 18, 2026
- High8.5Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.Check if you run itEPSS 0.36%Aug 18, 2026
- High8.8Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.Check if you run itEPSS 0.52%Aug 18, 2026
- High8.1Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.Check if you run itEPSS 0.47%Aug 18, 2026
- Critical9.9Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.Check if you run itEPSS 0.48%Aug 18, 2026
- Critical9.9Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.Check if you run itEPSS 0.79%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- High7.5Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.Check if you run itEPSS 0.39%Aug 18, 2026
- High8.1Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.Check if you run itEPSS 0.47%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- High7.5Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.Check if you run itEPSS 0.39%Aug 18, 2026
- Critical9.6Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.Check if you run itEPSS 0.43%Aug 18, 2026
- High8.8Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation.Check if you run itEPSS 0.42%Aug 18, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.11%Aug 18, 2026
- Medium6.0The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.Check if you run itEPSS 0.73%Aug 18, 2026
Sort