Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin setti…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.3WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting ma…Check if you run itEPSS 0.13%May 10, 2026
- Medium5.1WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiti…Check if you run itEPSS 0.19%May 10, 2026
- High8.7Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the i…Check if you run itEPSS 0.35%May 10, 2026
- Medium5.1Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in t…Check if you run itEPSS 0.20%May 10, 2026
- Critical9.3WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious…Check if you run itEPSS 0.40%May 10, 2026
- High8.7ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP…Check if you run itEPSS 0.57%May 10, 2026
- High8.7Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized…Check if you run itEPSS 0.93%May 10, 2026
- Critical9.3WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to create administrator accounts by submitting craf…Check if you run itEPSS 0.40%May 10, 2026
- Medium5.1WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by explo…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter.Check if you run itEPSS 0.24%May 10, 2026
- Low2.1A weakness has been identified in Wavlink NU516U1 240425.Check if you run itEPSS 8.51%May 10, 2026
- Low2.0A vulnerability was detected in codelibs Fess up to 15.5.1.Check if you run itEPSS 0.41%May 9, 2026
- Critical9.0Pelican is a platform for creating data federations.Check if you run itEPSS 0.40%May 9, 2026
- High8.3Plainpad is a self hosted note taking app.Check if you run itEPSS 0.46%May 9, 2026
- Low2.1A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425.Check if you run itEPSS 8.51%May 9, 2026
- Low2.1A vulnerability was identified in Wavlink NU516U1 M16U1_V240425.Check if you run itEPSS 8.51%May 9, 2026
- Low2.1A vulnerability was determined in Wavlink NU516U1 M16U1_V240425.Check if you run itEPSS 8.51%May 9, 2026
- Low2.1A vulnerability was found in Wavlink NU516U1 M16U1_V240425.Check if you run itEPSS 8.51%May 9, 2026
- Low2.1A vulnerability has been found in Wavlink NU516U1 M16U1_V240425.Check if you run itEPSS 8.51%May 9, 2026
- Medium5.3A security vulnerability has been detected in UGREEN CM933 1.1.59.4319.Check if you run itEPSS 0.40%May 9, 2026
- Medium6.8There is an Access Control Vulnerability in some HikCentral Professional versions.Check if you run itEPSS 0.28%May 9, 2026
- High8.1Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.49%May 9, 2026
- Medium5.3The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking flow in versions up to,…Check if you run itEPSS 0.66%May 9, 2026