Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownLiteSpeed Technologies LiteSpeed Cache Incorrect Privilege AssignmentKEVEPSS 0.9%Oct 13, 2026
- UnknownStellarWP the_events_calendar Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 2.1%Oct 13, 2026
- Unknownbrizy brizy Unrestricted Upload of File with Dangerous TypeKEVEPSS 1.0%Oct 13, 2026
- Unknownwppa wp_photo_album_plus Unrestricted Upload of File with Dangerous TypeKEVEPSS 0.5%Oct 13, 2026
- UnknownWebToffee import_export_wordpress_users Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.5%Oct 13, 2026
- Unknownbrainstormforce astra Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.4%Oct 13, 2026
- Unknownbrizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.4%Oct 13, 2026
- Unknownvanquish woocommerce_customers_manager Cross-Site Request Forgery (CSRF)KEVEPSS 0.3%Oct 13, 2026
- Unknownkriesi enfold Improper Access ControlKEVEPSS 0.3%Oct 13, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.3%Oct 13, 2026
- Unknownsimple-e-commerce-shopping-cart_project simple-e-commerce-shopping-cart Missing AuthorizationKEVEPSS 0.3%Oct 13, 2026
- UnknownWebToffee import_export_wordpress_users Unrestricted Upload of File with Dangerous TypeKEVEPSS 1.4%Oct 13, 2026
- UnknownHasThemes HT Mega Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 0.6%Oct 13, 2026
- Unknownwpfastestcache wp_fastest_cache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 73.7%Oct 13, 2026
- Unknownuserproplugin userpro Incorrect Privilege AssignmentKEVEPSS 0.9%Oct 13, 2026
- Unknownundsgn uncode Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.4%Oct 13, 2026
- Unknowngopiplus email_posts_to_subscribers Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 0.7%Oct 13, 2026
- Unknownavada fusion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.7%Oct 13, 2026
- Unknownavada fusion_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.4%Oct 13, 2026
- UnknownMissing AuthorizationKEVEPSS 0.6%Oct 13, 2026
- Unknownwp-ecommerce easy_wp_smtp Improper Control of Generation of Code ('Code Injection')KEVEPSS 1.5%Oct 13, 2026
- UnknownLangflow Langflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 0.6%Oct 12, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 1.5%Oct 12, 2026
- Criticaltheme-fusion avada_builder Improper Control of Generation of Code ('Code Injection')KEVEPSS 0.4%Oct 9, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 1.8%Oct 9, 2026