Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up tCheck if you run itEPSS 0.37%Nov 5, 2025
- Medium5.4An attacker with a valid read-only account can bypass Doris MCP Server’s read-only mode due to improper access control, allowing modifications that should have been prevented by reCheck if you run itEPSS 0.37%Nov 5, 2025
- High7.5The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including,Check if you run itEPSS 2.49%Nov 5, 2025
- Medium4.3The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerCheck if you run itEPSS 0.25%Nov 5, 2025
- Medium5.3The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on tCheck if you run itEPSS 0.25%Nov 5, 2025
- Medium6.3The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct refleCheck if you run itEPSS 0.18%Nov 5, 2025
- Low3.3Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.Check if you run itEPSS 0.12%Nov 5, 2025
- Medium6.4The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, andCheck if you run itEPSS 0.23%Nov 5, 2025
- Medium5.3The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due toCheck if you run itEPSS 0.23%Nov 5, 2025
- Medium5.6The Everest Forms (Pro) plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.7 via deserialization of untrusted input in the mime_coCheck if you run itEPSS 0.30%Nov 5, 2025
- Critical9.9Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files andCheck if you run itEPSS 0.64%Nov 5, 2025
- Critical9.8PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component.Check if you run itEPSS 1.18%Nov 5, 2025
- High7.5DWSurvey 6.14.0 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.32%Nov 5, 2025
- High7.1MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets (<>) in the From: header of SMTP DATA.Check if you run itEPSS 0.24%Nov 5, 2025
- Medium6.5A vulnerability in the XiaozhangBang Voluntary Like System V8.8 allows remote attackers to manipulate the zhekou parameter in the /topfirst.php Pay module, enabling unauthorized diCheck if you run itEPSS 0.39%Nov 5, 2025
- Medium5.3ownCloud guests Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.95%Nov 5, 2025
- Medium5.4OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface.Check if you run itEPSS 0.22%Nov 5, 2025
- Critical9.8meowapps ai_engine Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.66%Nov 5, 2025
- High8.7Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.39%Nov 4, 2025
- High8.8Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.52%Nov 4, 2025
- High8.8Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.48%Nov 4, 2025
- High8.8Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.38%Nov 4, 2025
- High8.8Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.40%Nov 4, 2025
- High8.7LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.26%Nov 4, 2025
- High7.1LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.39%Nov 4, 2025
Sort