Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core all…Check if you run itEPSS 0.42%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly Core curly-core allows PHP…Check if you run itEPSS 0.42%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in Kaira StoreCustomizer woocustomizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S…Check if you run itEPSS 0.38%Mar 25, 2026
- High8.8Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCo…Check if you run itEPSS 0.36%Mar 25, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects To…Check if you run itEPSS 0.31%Mar 25, 2026
- High8.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: f…Check if you run itEPSS 0.40%Mar 25, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affec…Check if you run itEPSS 0.26%Mar 25, 2026
- Medium6.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote att…Check if you run itEPSS 0.31%Mar 25, 2026
- Medium5.5Requests is a HTTP library.Check if you run itEPSS 0.19%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in ViaBill for WooCommerce ViaBill – WooCommerce viabill-woocommerce allows Exploiting Incorrectly Configured Access Control Securi…Check if you run itEPSS 0.25%Mar 25, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar al…Check if you run itEPSS 0.17%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File In…Check if you run itEPSS 0.42%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in avalex avalex avalex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects avalex: from n/a…Check if you run itEPSS 0.25%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issu…Check if you run itEPSS 0.19%Mar 25, 2026
- Medium6.3Missing Authorization vulnerability in LiquidThemes Ave Core ave-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ave Co…Check if you run itEPSS 0.20%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Moments moments allows PHP Local…Check if you run itEPSS 0.42%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Mixtape mixtape allows PHP Local…Check if you run itEPSS 0.42%Mar 25, 2026
- High7.3Missing Authorization vulnerability in Aarsiv Groups Automated FedEx live/manual rates with shipping labels a2z-fedex-shipping allows Exploiting Incorrectly Configured…Check if you run itEPSS 0.23%Mar 25, 2026
- Medium6.5pickplugins product_slider_for_woocommerce Missing AuthorizationPatch nowKEVEPSS 0.33%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The L…Check if you run itEPSS 0.34%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDO Remoji remoji allows Stored XSS.This issue affects Remoji: f…Check if you run itEPSS 0.18%Mar 25, 2026
- Critical9.1Improper Control of Generation of Code ('Code Injection') vulnerability in Jonathan Daggerhart Widget Wrangler widget-wrangler allows Code Injection.This issue affects…Check if you run itEPSS 0.32%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO:…Check if you run itEPSS 0.25%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Booking calendar, Appointment Booking System booking-cal…Check if you run itEPSS 0.18%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in CRM Perks Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms cf7-mailchimp allows Exploiting Incorrec…Check if you run itEPSS 0.33%Mar 25, 2026
Sort