Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on both the 'jkit_post_block' and 'je…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium4.3The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions u…Check if you run itEPSS 0.31%Oct 14, 2026
- High8.1The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_…Check if you run itEPSS 1.01%Oct 14, 2026
- High7.5The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up…Check if you run itEPSS 0.47%Oct 14, 2026
- High7.4The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and inc…Check if you run itEPSS 0.44%Oct 14, 2026
- UnknownMalicious code in seapy-ops (PyPI)Open the advisoryOct 14, 2026
- Medium5.3The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing una…Check if you run itEPSS 0.29%Oct 14, 2026
- Medium5.3The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record befo…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3The Paymentfor Gateway for WooCommerce WordPress plugin before 1.0.6 does not verify the authenticity of an inbound payment notification before marking an order as pai…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction identifier belongs to the order it is confirming, nor that the requester owns t…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing una…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium5.3The Robokassa payment gateway for Woocommerce WordPress plugin before 1.9.0 does not verify the authenticity of an incoming payment-notification request before acting…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium4.3The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default conf…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.5The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the authenticity of the payment provider's response when a customer returns fr…Check if you run itEPSS 0.22%Oct 14, 2026
- Medium4.1The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existin…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability.Check if you run itEPSS 0.32%Oct 14, 2026
- Medium5.3The Sunshine Photo Cart WordPress plugin before 3.7.4 does not check whether a visitor is permitted to access a restricted gallery before accepting comment submissions…Check if you run itEPSS 0.16%Oct 14, 2026
- Medium5.3The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allo…Check if you run itEPSS 0.16%Oct 14, 2026
- Medium5.3The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to ret…Check if you run itEPSS 0.27%Oct 14, 2026
- High8.6The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and ve…Check if you run itEPSS 0.34%Oct 14, 2026
- High7.5Important: python-tornado security updateOpen the advisoryOct 14, 2026
- Critical9.1Important: dovecot security updateOpen the advisoryOct 14, 2026
- Medium4.7A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of serv…Check if you run itEPSS 0.11%Oct 14, 2026