Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: properly pin the parent in blkcg_css_online blkcg_css_online is supposed to pin the blkcg of the parCheck this weekEPSS 17.00%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Input: i8042 - fix leaking of platform device on module removal Avoid resetting the module-wide i8042_platform_dCheck this weekEPSS 22.00%May 1, 2025
- Medium6.3YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.35%Apr 29, 2025
- Low3.5DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.Check this weekEPSS 60.00%Apr 28, 2025
- Critical9.9Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.Check if you run itEPSS 1.54%Apr 28, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in nortikin Sverchok 1.3.0.Check if you run itEPSS 0.65%Apr 27, 2025
- Medium6.5The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1.Check this weekEPSS 36.00%Apr 26, 2025
- High7.3The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, aCheck if you run itEPSS 0.54%Apr 26, 2025
- Medium5.3Missing Authorization vulnerability in vinodvaswani9 Bulk Assign Linked Products For WooCommerce wc-bulk-assign-linked-products allows Accessing Functionality Not Properly ConstraiCheck if you run itEPSS 0.33%Apr 24, 2025
- Medium5.3Missing Authorization vulnerability in Carlo La Pera WP Customize Login Page wp-customize-login-page allows Accessing Functionality Not Properly Constrained by ACLs.This issue affeCheck if you run itEPSS 0.33%Apr 24, 2025
- Medium5.3Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly ConstrainedCheck if you run itEPSS 0.33%Apr 24, 2025
- Critical9.8The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.55%Apr 24, 2025
- Medium4.2The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updatCheck if you run itEPSS 0.22%Apr 24, 2025
- High8.8The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.8.Check if you run itEPSS 0.44%Apr 24, 2025
- Critical9.8The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.72%Apr 24, 2025
- High8.8The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7.Check if you run itEPSS 0.37%Apr 24, 2025
- Low3.1Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignorCheck if you run itEPSS 0.27%Apr 24, 2025
- Medium6.5Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate the props used by the RetrospectivePost custom post type in the Playbooks pluginCheck if you run itEPSS 0.49%Apr 24, 2025
- High7.8CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.19%Apr 23, 2025
- Medium6.5The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6.Check if you run itEPSS 1.97%Apr 22, 2025
- Medium5.3Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Accessing Functionality Not Properly Constrained by ACLs.This issCheck if you run itEPSS 0.39%Apr 22, 2025
- High8.1The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to autheCheck if you run itEPSS 9.52%Apr 22, 2025
- High8.8The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_requeCheck if you run itEPSS 2.52%Apr 22, 2025
- Medium4.3An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.42%Apr 21, 2025
- High7.5The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophiCheck this weekEPSS 49.00%Apr 19, 2025