Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0.Check if you run itEPSS 1.22%May 2, 2026
- Medium5.8The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter in all versions up to, and including, 6.7.1.29…Check if you run itEPSS 0.23%May 2, 2026
- Medium5.5IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4Check if you run itEPSS 0.19%May 2, 2026
- High7.5The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 10.30.25.Check if you run itEPSS 0.37%May 2, 2026
- Medium5.4The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_svg' parame…Check if you run itEPSS 0.19%May 2, 2026
- High7.1The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and disruption of Stripe webhook configuration in all versions up to, and including, 3.6.5.Check if you run itEPSS 0.25%May 2, 2026
- High7.5The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and 'exclude_object_ids' parameters in all versions up to, and inclu…Check if you run itEPSS 0.33%May 2, 2026
- High7.5The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all versions up to, and including, 1.13.18.Check if you run itEPSS 0.31%May 2, 2026
- High7.5The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18.Check if you run itEPSS 1.42%May 2, 2026
- Low2.1A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0.Check if you run itEPSS 0.34%May 2, 2026
- Low2.0A vulnerability was determined in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.21%May 2, 2026
- Medium6.3A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01.Check if you run itEPSS 0.23%May 2, 2026
- Low2.9A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01.Check if you run itEPSS 0.32%May 2, 2026
- Low2.1A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01.Check if you run itEPSS 4.53%May 2, 2026
- High8.6School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read a…Check if you run itEPSS 0.26%May 2, 2026
- High8.6CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby e…Check if you run itEPSS 0.46%May 2, 2026
- High8.7CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.Check if you run itEPSS 0.33%May 2, 2026
- Medium5.4The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping…Check if you run itEPSS 0.19%May 2, 2026
- Low2.0A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01.Check if you run itEPSS 5.70%May 2, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.40%May 2, 2026
- Medium5.3The Royal Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action in all vers…Check if you run itEPSS 0.50%May 2, 2026
- High7.5The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-based blind SQL Injection v…Check if you run itEPSS 0.34%May 2, 2026
- High8.7A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01.Check if you run itEPSS 0.63%May 2, 2026
- Medium6.3A weakness has been identified in TRENDnet TEW-821DAP 1.12B01.Check if you run itEPSS 0.23%May 2, 2026
- Medium6.5The Geo Mashup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geo_mashup_null_fields' parameter in all versions up to, and including, 1.…Check if you run itEPSS 0.37%May 2, 2026
Sort