Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requestsCheck if you run itEPSS 0.28%Apr 8, 2026
- Medium4.3The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium6.5The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | E…Check if you run itEPSS 0.14%Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in podigee Podigee podigee allows Server Side Request Forgery.This issue affects Podigee: from n/a through <= 1.4.0.Check if you run itEPSS 0.22%Apr 8, 2026
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forge…Check if you run itEPSS 0.14%Apr 8, 2026
- Medium6.0Server-Side Request Forgery (SSRF) vulnerability in Brecht Visual Link Preview visual-link-preview allows Server Side Request Forgery.This issue affects Visual Link Pr…Check if you run itEPSS 0.21%Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Server Side Request…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issu…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Skywarrior Blackfyre blackfyre allows Cross Site Request Forgery.This issue affects Blackfyre: from n/a through <= 2.5.4.Check if you run itEPSS 0.18%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in mndpsingh287 Theme Editor theme-editor allows Code Injection.This issue affects Theme Editor: from n/a through <= 3.2.Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Magazine grandmagazine allows Cross Site Request Forgery.This issue affects Grand Magazine: from n/…Check if you run itEPSS 0.13%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from…Check if you run itEPSS 0.14%Apr 8, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Car Rental grandcarrental allows Cross Site Request Forgery.This issue affects Grand Car Rental: fr…Check if you run itEPSS 0.13%Apr 8, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Cross Site Request Forgery.This issue affects Grand Blog: from n/a through <= 3.1.Check if you run itEPSS 0.17%Apr 8, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Getty Images Getty Images getty-images allows Server Side Request Forgery.This issue affects Getty Images: from n/a…Check if you run itEPSS 0.23%Apr 8, 2026
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in spicethemes SpicePress spicepress allows Upload a Web Shell to a Web Server.This issue affects SpicePress: from n/a…Check if you run itEPSS 0.20%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Appointment appointment allows Upload a Web Shell to a Web Server.This issue affects Appointment: fr…Check if you run itEPSS 0.20%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Busiprof busiprof allows Upload a Web Shell to a Web Server.This issue affects Busiprof: from n/a th…Check if you run itEPSS 0.20%Apr 8, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in themearile NewsExo newsexo allows Cross Site Request Forgery.This issue affects NewsExo: from n/a through <= 7.1.Check if you run itEPSS 0.14%Apr 8, 2026
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Bluestreet bluestreet allows Cross Site Request Forgery.This issue affects Bluestreet: from n/a through <= 1.7.3.Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Photography grandphotography allows Cross Site Request Forgery.This issue affects Grand Photography…Check if you run itEPSS 0.14%Apr 8, 2026
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: fro…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.5Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.3The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7.Check if you run itEPSS 0.44%Apr 8, 2026