Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A vulnerability has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Low1.9A flaw has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Low1.9A vulnerability was detected in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Medium6.4The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the 'wpdm_members' shortcode in versions up to and in…Check if you run itEPSS 0.35%Apr 9, 2026
- Medium4.3The MStore API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.18.3.Check if you run itEPSS 0.36%Apr 9, 2026
- Medium5.5A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.41%Apr 9, 2026
- Medium5.5A vulnerability was found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.41%Apr 9, 2026
- Medium5.5A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.41%Apr 9, 2026
- Low2.1A flaw has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.45%Apr 9, 2026
- Low2.1A vulnerability was detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.45%Apr 9, 2026
- Medium5.5A security vulnerability has been detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.41%Apr 9, 2026
- Low2.1A weakness has been identified in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.32%Apr 9, 2026
- Medium5.5A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.41%Apr 9, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 51.12%Apr 9, 2026
- Medium5.5A weakness has been identified in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.41%Apr 8, 2026
- Low2.1A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0.Check if you run itEPSS 0.41%Apr 8, 2026
- Low2.1A vulnerability was identified in SourceCodester Online Food Ordering System 1.0.Check if you run itEPSS 0.41%Apr 8, 2026
- Low2.0A flaw has been found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.33%Apr 8, 2026
- Low2.0A security vulnerability has been detected in code-projects Easy Blog Site 1.0.Check if you run itEPSS 0.33%Apr 8, 2026
- Medium5.5A weakness has been identified in code-projects Easy Blog Site up to 1.0.Check if you run itEPSS 0.41%Apr 8, 2026
- High8.1The MW WP Form plugin for WordPress is vulnerable to Arbitrary File Move/Read in all versions up to and including 5.1.1.Check if you run itEPSS 0.92%Apr 8, 2026
- Medium5.3Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lac…Check if you run itEPSS 0.28%Apr 8, 2026
- High8.8The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all…Check if you run itEPSS 1.05%Apr 8, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnTheme OrganicFood organicfood allows PHP Loc…Check if you run itEPSS 0.51%Apr 8, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Homeo homeo allows PHP Local File In…Check if you run itEPSS 0.51%Apr 8, 2026