Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing cCheck this weekEPSS 20.00%Jan 6, 2026
- Medium4.3The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on theCheck this weekEPSS 23.00%Jan 6, 2026
- Critical9.8The FS Registration Password plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.1.Check this weekEPSS 43.00%Jan 6, 2026
- Critical9.8The AS Password Field In Default Registration Form plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0.Check this weekEPSS 37.00%Jan 6, 2026
- Medium5.3The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerCheck this weekEPSS 28.00%Jan 6, 2026
- Medium6.5The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dir_path' parameter iCheck this weekEPSS 38.00%Jan 6, 2026
- High7.3w3eden download_manager Missing Support for Integrity CheckPatch nowKEVEPSS 0.20%Jan 6, 2026
- Critical9.3Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.Check if you run itEPSS 0.50%Jan 5, 2026
- Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.Check if you run itEPSS 0.17%Jan 5, 2026
- High7.5AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.58%Jan 5, 2026
- High8.7Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFCCheck if you run itEPSS 0.44%Jan 5, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Waituk Entrada allows SQL Injection.This issue affects Entrada: from n/a throuCheck this weekEPSS 28.00%Jan 5, 2026
- Medium6.5Missing Authorization vulnerability in Marketing Fire, LLC LoginWP - Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LoginWP - Pro: from n/aCheck this weekEPSS 23.00%Jan 5, 2026
- High7.5Missing Authorization vulnerability in Marketing Fire LLC LoginWP - Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LoginWP - Pro: from n/a tCheck this weekEPSS 23.00%Jan 5, 2026
- High7.5Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BCheck this weekEPSS 27.00%Jan 5, 2026
- Low2.1A flaw has been found in Campcodes Supplier Management System 1.0.Check if you run itEPSS 0.32%Jan 5, 2026
- Medium5.5A security flaw has been discovered in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.44%Jan 5, 2026
- Low2.1A vulnerability was identified in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.37%Jan 5, 2026
- Low2.0A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1.Check if you run itEPSS 0.22%Jan 5, 2026
- Low2.0A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1.Check if you run itEPSS 0.23%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() If irq_domain_translate_twocell() sets "hwirq" to >=Check if you run itEPSS 0.19%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocateCheck if you run itEPSS 0.19%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_nents_for_len The return value of sg_nents_for_len was assignedCheck if you run itEPSS 0.21%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error checks Prevent a kernel warning when netconsole setup fails onCheck if you run itEPSS 0.18%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocatCheck if you run itEPSS 0.20%Jan 5, 2026
Sort