Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: fro…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.5Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.3The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7.Check if you run itEPSS 0.44%Apr 8, 2026
- Medium5.3The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in vers…Check if you run itEPSS 0.49%Apr 8, 2026
- Medium4.3The Quran Translations plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.3The Riaxe Product Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4 via the '/wp-json/InkXEProd…Check if you run itEPSS 0.64%Apr 8, 2026
- Medium5.3The PZ Frontend Manager plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.6.Check if you run itEPSS 0.42%Apr 8, 2026
- Medium5.3The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6.Check if you run itEPSS 0.44%Apr 8, 2026
- Medium4.1An insufficient session expiration vulnerability exists in the latest version of parisneo/lollms.Check if you run itEPSS 0.23%Apr 8, 2026
- High8.8The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 th…Check if you run itEPSS 0.21%Apr 8, 2026
- Medium5.4The Download Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in the and methods in in all versions up to, and including, 5.1.10.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Apr 8, 2026
- Medium4.3Plane is an an open-source project management tool.Check if you run itEPSS 0.29%Apr 7, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.32%Apr 7, 2026
- High8.1RedwoodSDK is a server-first React framework.Check if you run itEPSS 0.19%Apr 7, 2026
- Medium6.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Apr 7, 2026
- Medium6.3Vite is a frontend tooling framework for JavaScript.Patch nowKEVEPSS 0.98%Apr 7, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.Check if you run itEPSS 2.62%Apr 7, 2026
- High7.7OpenObserve is a cloud-native observability platform.Check if you run itEPSS 0.36%Apr 7, 2026
- Medium6.5Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.31%Apr 7, 2026
- Medium5.3OrangeHRM is a comprehensive human resource management (HRM) system.Check if you run itEPSS 0.26%Apr 7, 2026
- Critical9.1ChurchCRM is an open-source church management system.Check if you run itEPSS 1.82%Apr 7, 2026
- High8.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.32%Apr 7, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.38%Apr 7, 2026
- High7.0ChurchCRM is an open-source church management system.Check if you run itEPSS 0.36%Apr 7, 2026