Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows unauthenticated attackers to reset any user account pa…Check if you run itEPSS 0.46%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in API v4.0 where the default empty api.apiClientToken allows unauthenticated users to create and…Check if you run itEPSS 0.56%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to ch…Check if you run itEPSS 0.44%May 28, 2026
- High8.0An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the force_download.php componentCheck if you run itEPSS 0.61%May 28, 2026
- High8.8The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.20.1 via the gutenbee_file_and_ext_…Check if you run itEPSS 1.23%May 28, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'append_whe…Check if you run itEPSS 0.67%May 28, 2026
- High8.1The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object I…Check if you run itEPSS 0.37%May 28, 2026
- Medium6.4The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in the _filte…Check if you run itEPSS 0.36%May 28, 2026
- High8.8The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filter…Check if you run itEPSS 0.79%May 28, 2026
- High7.2The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the superglobal in all versions up to, and including, 1.8.0.Check if you run itEPSS 0.35%May 28, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0.Check if you run itEPSS 0.55%May 26, 2026
- Medium5.5A security vulnerability has been detected in code-projects Project Management System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- Low2.1A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.Check if you run itEPSS 0.42%May 26, 2026
- Medium5.5A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- Medium5.5A flaw has been found in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- Medium5.5A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- High8.1FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin.Check if you run itEPSS 1.66%May 26, 2026
- High8.1FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin.Check if you run itEPSS 0.41%May 26, 2026
- Critical9.8FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin.Check if you run itEPSS 2.65%May 26, 2026
- Low2.1A weakness has been identified in CodeAstro Leave Management System 1.0.Check if you run itEPSS 0.32%May 26, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion.Check if you run itEPSS 0.51%May 26, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 2.08%May 26, 2026
- Medium5.5A vulnerability was identified in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- Low2.1A vulnerability was determined in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.45%May 26, 2026
- Medium5.5A vulnerability was found in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.41%May 26, 2026