Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium4.3The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium6.5The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium4.4The Inquiry Form to Posts or Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Form Header' field in versions up to and including 1.0.Check if you run itEPSS 0.33%Apr 8, 2026
- High7.2The Gerador de Certificados – DevApps plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the moveUploadedFile() functi…Check if you run itEPSS 0.82%Apr 8, 2026
- Medium4.3The Quran Translations plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium6.4The Columns by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the [print_clmns] shortcode in all ver…Check if you run itEPSS 0.41%Apr 8, 2026
- Medium6.5The WP Blockade plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 0.9.14.Check if you run itEPSS 0.47%Apr 8, 2026
- Medium5.3The PZ Frontend Manager plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.6.Check if you run itEPSS 0.42%Apr 8, 2026
- Medium4.4The Whole Enquiry Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘woowhole_success_msg’ parameter in all versions up to…Check if you run itEPSS 0.24%Apr 8, 2026
- Medium5.1Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier.Check if you run itEPSS 0.41%Apr 8, 2026
- High8.8The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 th…Check if you run itEPSS 0.21%Apr 8, 2026
- Critical9.8WPEverest everest_forms Deserialization of Untrusted DataPatch nowKEVEPSS 2.98%Apr 8, 2026
- Medium5.4The Download Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in the and methods in in all versions up to, and including, 5.1.10.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Apr 8, 2026
- Medium6.9An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure a…Check if you run itEPSS 0.24%Apr 7, 2026
- Medium5.4The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider…Check if you run itEPSS 0.32%Apr 7, 2026
- Medium5.3Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.Check if you run itEPSS 0.24%Apr 7, 2026
- High7.7Plane is an an open-source project management tool.Check if you run itEPSS 0.31%Apr 7, 2026
- Medium5.1OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.28%Apr 7, 2026
- Medium5.3OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.26%Apr 7, 2026
- High7.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.45%Apr 7, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.39%Apr 7, 2026
- Medium6.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.37%Apr 7, 2026
- Medium6.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.38%Apr 7, 2026