Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level…Check if you run itEPSS 0.42%Aug 19, 2026
- High7.2The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and abov…Check if you run itEPSS 0.46%Aug 19, 2026
- Low2.7The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during s…Check if you run itEPSS 0.28%Aug 19, 2026
- High8.1The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different auth…Check if you run itEPSS 0.35%Aug 19, 2026
- High8.6The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.Check if you run itEPSS 0.45%Aug 19, 2026
- High8.5advancedfilemanager advanced_file_manager Missing AuthorizationPatch nowKEVEPSS 1.25%Aug 19, 2026
- High8.1The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to…Check if you run itEPSS 1.08%Aug 19, 2026
- Medium5.5A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Medium5.5A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Medium5.5A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Critical10.0A flaw has been found in Comfast CF-N1-S 2.6.0.1.Check if you run itEPSS 1.02%Aug 19, 2026
- High8.6A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.79%Aug 19, 2026
- High8.6A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306.Check if you run itEPSS 0.79%Aug 19, 2026
- Medium6.9A vulnerability was found in SPLWare esProc up to 20260507.Check if you run itEPSS 0.56%Aug 19, 2026
- Medium5.5A vulnerability has been found in code-projects Online Job Portal System 1.0.Check if you run itEPSS 0.43%Aug 19, 2026
- Low2.1A flaw has been found in TRENDnet Router 1.1.02b01.Check if you run itEPSS 1.82%Aug 19, 2026
- Medium6.4The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all vers…Check if you run itEPSS 0.41%Aug 19, 2026
- Critical9.1A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-mid…Check if you run itEPSS 0.32%Aug 19, 2026
- Low2.1A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01.Check if you run itEPSS 1.82%Aug 19, 2026
- Low2.1A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta.Check if you run itEPSS 0.41%Aug 19, 2026
- Low2.1A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta.Check if you run itEPSS 0.37%Aug 19, 2026
- High8.6A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01.Check if you run itEPSS 0.85%Aug 19, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.86%Aug 19, 2026
- Unknowncozmoslabs translatepress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 19, 2026
- Critical9.8Gitea Code Injection VulnerabilityPatch nowKEVEPSS 23.99%Aug 19, 2026
Sort