Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.72%May 7, 2026
- Critical9.4CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.72%May 7, 2026
- Medium5.3The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.51.1.Check if you run itEPSS 0.42%May 7, 2026
- UnknownW3 Total Cache '_parse_dynamic_mfunc' Command InjectionPatch nowKEVEPSS 22.63%May 7, 2026
- Medium5.4PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.25%May 6, 2026
- High8.7Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authenticated users with media-upload permissio…Check if you run itEPSS 1.00%May 6, 2026
- High8.6Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature that allows authenticated site_admin users…Check if you run itEPSS 0.48%May 6, 2026
- High8.7Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that allows low-privilege authenticated users to ex…Check if you run itEPSS 0.95%May 6, 2026
- Critical9.2Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compose-apache.yaml configuration that allows unauthenticated attackers to a…Check if you run itEPSS 0.64%May 6, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When the FarSync T-series…Check if you run itEPSS 0.58%May 6, 2026
- Medium4.9The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1.Check if you run itEPSS 0.83%May 6, 2026
- Medium4.8PhpSpreadsheet is a library for reading and writing spreadsheet files.Check if you run itEPSS 0.24%May 5, 2026
- Critical9.2PhpSpreadsheet is a library for reading and writing spreadsheet files.Check if you run itEPSS 0.78%May 5, 2026
- High8.8The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4.Check if you run itEPSS 0.79%May 5, 2026
- Low2.1A vulnerability was identified in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.32%May 5, 2026
- Medium6.5The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5.Check if you run itEPSS 0.67%May 5, 2026
- Medium6.1The Publish 2 Ping.fm plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.18%May 5, 2026
- Medium4.9The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via the AJAX route.Check if you run itEPSS 0.64%May 5, 2026
- Low2.1A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1.Check if you run itEPSS 0.32%May 5, 2026
- Low2.1A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1.Check if you run itEPSS 0.36%May 4, 2026
- High7.2OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)Check if you run itEPSS 0.53%May 4, 2026
- High8.7Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class…Check if you run itEPSS 0.60%May 4, 2026
- High8.2The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows…Check if you run itEPSS 0.60%May 4, 2026
- Medium5.7Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent functionCheck if you run itEPSS 0.47%May 4, 2026
- Low2.1A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.32%May 4, 2026