Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.1The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the cl…CVE-2026-104995 · CVE.org · NIST NVDOct 13, 2026
High8.1WordPress Core Remote File Inclusion VulnerabilityCVE-2026-87902 · WordPress · Core · CISA KEV · CVE.org · FIRST EPSS · wordpressKEVEPSS 40.0%Sep 22, 2026
High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityCVE-2025-68645 · Synacor · Zimbra Collaboration Suite (ZCS) · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 48.9%Dec 22, 2025