Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability has been found in GreenCMS up to 2.3.Check if you run itEPSS 0.35%Apr 26, 2026
- Low2.0A security flaw has been discovered in CodeAstro Online Job Portal 1.0.Check if you run itEPSS 0.33%Apr 26, 2026
- Medium5.5A vulnerability was found in Typecho up to 1.3.0.Check if you run itEPSS 0.47%Apr 26, 2026
- Medium6.9A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1.Check if you run itEPSS 0.40%Apr 25, 2026
- Low2.0A vulnerability was identified in pagekit up to 1.0.18.Check if you run itEPSS 0.38%Apr 25, 2026
- Medium5.3A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0.Check if you run itEPSS 0.32%Apr 25, 2026
- Low2.0A vulnerability was detected in JiZhiCMS up to 2.5.6.Check if you run itEPSS 0.33%Apr 25, 2026
- Medium4.3The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…Check if you run itEPSS 0.19%Apr 24, 2026
- Medium5.3The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the dex_bccf_…Check if you run itEPSS 0.43%Apr 24, 2026
- High8.1The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3.Check if you run itEPSS 1.14%Apr 24, 2026
- Medium5.3The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0.Check if you run itEPSS 0.42%Apr 24, 2026
- Medium5.3The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 9.1.2.Check if you run itEPSS 0.52%Apr 24, 2026
- High8.2Open Source Social Network (OSSN) is open-source social networking software developed in PHP.Check if you run itEPSS 0.66%Apr 24, 2026
- Critical9.3Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads.Check if you run itEPSS 0.67%Apr 23, 2026
- Critical9.1Froxlor is open source server administration software.Check if you run itEPSS 0.69%Apr 23, 2026
- Critical9.9Froxlor is open source server administration software.Check if you run itEPSS 0.75%Apr 23, 2026
- Medium6.9Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side…Check if you run itEPSS 1.11%Apr 22, 2026
- Critical9.3Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executa…Check if you run itEPSS 4.43%Apr 22, 2026
- High7.1Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.ph…Check if you run itEPSS 3.63%Apr 22, 2026
- High8.8Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php…Check if you run itEPSS 3.07%Apr 22, 2026
- Critical9.1DDEV is an open-source tool for running local web development environments for PHP and Node.js.Check if you run itEPSS 0.46%Apr 22, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Medium4.4The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Permanent keywords' field in all versio…Check if you run itEPSS 0.40%Apr 22, 2026
- Medium4.3The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.23%Apr 22, 2026
- High7.2The HTTP Headers plugin for WordPress is vulnerable to External Control of File Name or Path leading to Remote Code Execution in all versions up to and including 1.19.2.Check if you run itEPSS 1.55%Apr 22, 2026