Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read a…Check if you run itEPSS 0.26%May 2, 2026
- High8.6CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby e…Check if you run itEPSS 0.46%May 2, 2026
- High8.7CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.Check if you run itEPSS 0.33%May 2, 2026
- Medium5.4The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping…Check if you run itEPSS 0.19%May 2, 2026
- Low2.0A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01.Check if you run itEPSS 5.70%May 2, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.40%May 2, 2026
- Medium5.3The Royal Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action in all vers…Check if you run itEPSS 0.50%May 2, 2026
- High7.5The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-based blind SQL Injection v…Check if you run itEPSS 0.34%May 2, 2026
- High8.7A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01.Check if you run itEPSS 0.63%May 2, 2026
- Medium6.3A weakness has been identified in TRENDnet TEW-821DAP 1.12B01.Check if you run itEPSS 0.23%May 2, 2026
- Medium6.5The Geo Mashup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geo_mashup_null_fields' parameter in all versions up to, and including, 1.…Check if you run itEPSS 0.37%May 2, 2026
- Medium5.3The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.46%May 2, 2026
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057.Check if you run itEPSS 0.38%May 2, 2026
- Medium5.3The FundPress – WordPress Donation Plugin for WordPress is vulnerable to authorization bypass in versions up to and including 2.0.8.Check if you run itEPSS 0.40%May 2, 2026
- High8.8The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions…Check if you run itEPSS 0.77%May 2, 2026
- Low2.1A security flaw has been discovered in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.21%May 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_…Check if you run itEPSS 0.12%May 2, 2026
- High8.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5.Check if you run itEPSS 0.46%May 2, 2026
- High7.2The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1…Check if you run itEPSS 0.58%May 2, 2026
- Medium6.4The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…Check if you run itEPSS 0.36%May 2, 2026
- Medium4.4The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme.Check if you run itEPSS 0.25%May 2, 2026
- Medium4.4The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2.0 due…Check if you run itEPSS 0.25%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Consent field hidden inputs in versions up to and including 2.10.0.Check if you run itEPSS 0.24%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.23%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.25%May 2, 2026
Sort