Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.8 via the function.Check if you run itEPSS 0.72%May 2, 2026
- Critical9.8The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46.Check if you run itEPSS 0.84%May 2, 2026
- High8.8The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmg_save_provider_config AJAX action in all vers…Check if you run itEPSS 0.56%May 2, 2026
- Medium5.4The My Social Feeds – Social Feeds Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 1.0.4 via the 'ttp…Check if you run itEPSS 0.32%May 2, 2026
- Medium5.3The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0.Check if you run itEPSS 0.51%May 2, 2026
- Medium6.4The Maxi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API endpoint in all versions up to, and including, 2.1.9 due to insuffic…Check if you run itEPSS 0.42%May 2, 2026
- Medium4.9SQL Injection via ORDER BY clause in V2Board thru 1.7.4.Check if you run itEPSS 0.42%May 1, 2026
- Medium4.8Cross-Site Scripting (XSS) in V2Board thru 1.7.4.Check if you run itEPSS 0.29%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: reject zero-length fixed buffer import validate_fixed_range() admits buf_addr at the…Check if you run itEPSS 0.12%May 1, 2026
- High8.8The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2.Check if you run itEPSS 0.26%May 1, 2026
- Medium4.3The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14.Check if you run itEPSS 0.18%May 1, 2026
- Low2.0A weakness has been identified in MacCMS Pro up to 2022.1.3.Check if you run itEPSS 0.38%May 1, 2026
- Low2.0A vulnerability was found in code-projects Gym Management System 1.0.Check if you run itEPSS 0.33%May 1, 2026
- Critical9.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check.Check if you run itEPSS 0.20%Apr 30, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.72%Apr 30, 2026
- High8.8A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.0.0.Check if you run itEPSS 0.20%Apr 30, 2026
- High7.5U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint.Check if you run itEPSS 0.51%Apr 30, 2026
- High8.8A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0.Check if you run itEPSS 0.21%Apr 30, 2026
- Medium5.5A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated…Check if you run itEPSS 0.20%Apr 30, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADM…Check if you run itEPSS 0.12%Apr 30, 2026
- Medium5.5A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0.Check if you run itEPSS 0.47%Apr 30, 2026
- Low2.1A flaw has been found in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.32%Apr 30, 2026
- Low2.1A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.32%Apr 29, 2026
- Low2.0A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.33%Apr 29, 2026
- Low2.0A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.33%Apr 29, 2026