Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7A flaw was found in the Quay config-tool's GitLab OAuth validator.Check if you run itEPSS 0.20%May 29, 2026
- Medium5.3The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_sit…Check if you run itEPSS 0.41%May 29, 2026
- Medium5.3The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Payment Bypass via Insufficient Verification of Data Authenticity in all versions up…Check if you run itEPSS 0.20%May 29, 2026
- High8.1The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 This is due to missing nonce verifi…Check if you run itEPSS 0.21%May 29, 2026
- Critical10.0The acer_cgi.log file in the device firmware is accessible without authentication via the web interface.Check if you run itEPSS 0.52%May 29, 2026
- Critical10.0Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.Check if you run itEPSS 1.34%May 29, 2026
- High8.3Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.Check if you run itEPSS 0.21%May 29, 2026
- Critical10.0Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.Check if you run itEPSS 0.33%May 29, 2026
- High8.6The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.Check if you run itEPSS 0.37%May 29, 2026
- High8.7Unauthenticated Debug Service.Check if you run itEPSS 0.21%May 29, 2026
- Medium4.8ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent Jav…Check if you run itEPSS 0.18%May 29, 2026
- Medium4.8ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent Jav…Check if you run itEPSS 0.18%May 29, 2026
- High7.5CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows al…Check if you run itEPSS 0.24%May 29, 2026
- Medium4.1A flaw was found in the Quay config-tool's LDAP and SMTP validation functions.Check if you run itEPSS 0.19%May 29, 2026
- Medium4.9The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 3.28.28 du…Check if you run itEPSS 0.29%May 29, 2026
- Medium6.4The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carousel_direction' parameter of the Carousel Anything widget…Check if you run itEPSS 0.27%May 29, 2026
- High7.1An SQL injection vulnerability exists in Mautic's API contact filtering mechanism.Check if you run itEPSS 0.22%May 29, 2026
- Medium4.1Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read acc…Check if you run itEPSS 0.10%May 29, 2026
- Critical9.8The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versions 1.8.50 through 1.8.60.Check if you run itEPSS 0.51%May 29, 2026
- Medium6.4The Simple Divi Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [showmodule] shortcode in versions up to, and…Check if you run itEPSS 0.20%May 29, 2026
- High7.1Service Center developed by BankPro E-Service Technology has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify the p…Check if you run itEPSS 0.26%May 29, 2026
- Medium4.8A flaw was found in libsoup.Check if you run itEPSS 0.87%May 29, 2026
- Medium6.4The StatCounter – Free Real Time Visitor Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.1.1 This is due to…Check if you run itEPSS 0.30%May 29, 2026
- Medium6.4The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio I…Check if you run itEPSS 0.16%May 29, 2026
- High8.8The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'setti…Check if you run itEPSS 0.38%May 29, 2026
Sort