Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions.Check if you run itEPSS 0.38%Jun 26, 2026
- Critical9.3Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.Check if you run itEPSS 0.40%Jun 26, 2026
- Critical9.8Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions.Check if you run itEPSS 0.56%Jun 26, 2026
- High8.1Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions.Check if you run itEPSS 0.44%Jun 26, 2026
- Critical9.8Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.Check if you run itEPSS 0.48%Jun 26, 2026
- High7.5Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions.Check if you run itEPSS 0.43%Jun 26, 2026
- Critical9.9Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions.Check if you run itEPSS 0.48%Jun 26, 2026
- Medium6.4Subscriber Server Side Request Forgery (SSRF) in utm.codes <= 1.9.0 versions.Check if you run itEPSS 0.23%Jun 26, 2026
- High7.5Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions.Check if you run itEPSS 0.35%Jun 26, 2026
- High8.8Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.Check if you run itEPSS 0.42%Jun 26, 2026
- High8.8Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.Check if you run itEPSS 0.42%Jun 26, 2026
- High7.5Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions.Check if you run itEPSS 0.39%Jun 26, 2026
- High7.5Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions.Check if you run itEPSS 0.39%Jun 26, 2026
- High7.3Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.Check if you run itEPSS 0.30%Jun 26, 2026
- High7.5Unauthenticated Sensitive Data Exposure in Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups <= 2.0.9 versions.Check if you run itEPSS 0.39%Jun 26, 2026
- High7.5Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions.Check if you run itEPSS 0.39%Jun 26, 2026
- High7.5Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions.Check if you run itEPSS 0.35%Jun 26, 2026
- High7.5Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions.Check if you run itEPSS 0.42%Jun 26, 2026
- High7.4Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions.Check if you run itEPSS 0.32%Jun 26, 2026
- High7.5Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions.Check if you run itEPSS 0.35%Jun 26, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityPatch nowKEVEPSS 2.10%Jun 26, 2026
- High7.6WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerabilityCheck if you run itEPSS 0.31%Jun 26, 2026
- High7.5WordPress Ads by WPQuads plugin <= 3.0.3 - Sensitive Data Exposure vulnerabilityCheck if you run itEPSS 0.42%Jun 26, 2026
- UnknownGogs Gogs Relative Path TraversalPatch nowKEVEPSS 1.11%Jun 26, 2026
- Critical9.3FlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 4.36%Jun 25, 2026
Sort