Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor (admin_templates.php) because the mail body is fetched by…Check if you run itEPSS 0.20%Oct 13, 2026
- UnknownMerge pull request #825 from eliashaeussler/typo3-core-2026-10Check if you run itEPSS 0.51%Oct 13, 2026
- Medium4.3The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai…Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.5A vulnerability was found in SourceCodester Human Resource Management System 1.0.Check if you run itEPSS 0.66%Oct 13, 2026
- Medium5.5A weakness has been identified in SourceCodester Performance Indicator System 1.0.Check if you run itEPSS 0.41%Oct 13, 2026
- Medium5.5A vulnerability was found in SourceCodester Performance Indicator System 1.0.Check if you run itEPSS 0.41%Oct 13, 2026
- Low2.1A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0.Check if you run itEPSS 0.20%Oct 13, 2026
- Low2.1A vulnerability has been found in code-projects Online Reviewer System 1.0.Check if you run itEPSS 0.27%Oct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/workspaces-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui (npm)Open the advisoryOct 13, 2026
- HighThe Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name User Field in all versions up to, and includi…Check if you run itEPSS 0.24%Oct 13, 2026
- Unknownwpusermanager wp_user_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.73%Oct 13, 2026
- UnknownThemeum tutor_lms Deserialization of Untrusted DataPatch nowKEVEPSS 1.07%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- Unknownweplugins wp_maps Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Oct 13, 2026
- Unknownbeardev joomsport Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.66%Oct 13, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.95%Oct 13, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.39%Oct 13, 2026
- Unknownbrizy brizy Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- Unknownkriesi enfold Improper Access ControlPatch nowKEVEPSS 0.33%Oct 13, 2026
- Low2.1A weakness has been identified in itsourcecode Baptism Information Management System 1.0.Check if you run itEPSS 0.25%Oct 12, 2026