Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing un…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium5.3The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission befor…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to ret…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium6.8The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe H…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium5.3The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated u…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.8The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an inline scr…Check if you run itEPSS 0.32%Oct 14, 2026
- High8.6The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and ve…Check if you run itEPSS 0.34%Oct 14, 2026
- UnknownCVE-2026-97689 is listed by USN-8926-1: urllib3 vulnerabilities.Check if you run itEPSS 0.34%Oct 14, 2026
- UnknownCVE-2026-97687 is listed by USN-8926-1: urllib3 vulnerabilities.Check if you run itEPSS 0.21%Oct 14, 2026
- Medium6.5A defect in the Qt for MCUs core string handling causes heap memory corruption.Check if you run itEPSS 0.33%Oct 14, 2026
- Medium4.7A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of serv…Check if you run itEPSS 0.11%Oct 14, 2026
- Medium5.3An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, wh…Check if you run itEPSS 0.33%Oct 14, 2026
- High8.6A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthori…Check if you run itEPSS 0.26%Oct 14, 2026
- Low3.7A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or trunc…Check if you run itEPSS 0.26%Oct 14, 2026
- Low3.7A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain informat…Check if you run itEPSS 0.27%Oct 14, 2026
- High7.0Multiple smartphones provided by Rakuten Mobile, Inc.Check if you run itEPSS 0.20%Oct 14, 2026
- Medium6.7The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component.Check if you run itEPSS 1.68%Oct 14, 2026
- Medium5.3A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to acces…Check if you run itEPSS 0.26%Oct 14, 2026
- High8.1A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to exe…Check if you run itEPSS 1.21%Oct 14, 2026
- Medium5.3A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.Check if you run itEPSS 0.25%Oct 14, 2026
- Medium4.0The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium4.3Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium6.4The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'response' parameter in all versio…Check if you run itEPSS 0.25%Oct 14, 2026