Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2MagicMirror² is an open source modular smart mirror platform.Check if you run itEPSS 1.68%May 14, 2026
- Medium6.3Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications.Check if you run itEPSS 0.27%May 14, 2026
- High8.8RMCP is an official Rust SDK for the Model Context Protocol.Check if you run itEPSS 0.24%May 14, 2026
- High8.6Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP code by up…Check if you run itEPSS 0.63%May 14, 2026
- High7.1Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() on erro…Check if you run itEPSS 0.48%May 14, 2026
- High7.1Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter.Check if you run itEPSS 0.35%May 14, 2026
- High7.5The Database Backup for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.57%May 14, 2026
- Medium5.1podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content d…Check if you run itEPSS 0.34%May 14, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denial of service via unbounded buffer accumulation in multipart header parsing.Check if you run itEPSS 0.85%May 14, 2026
- High7.5The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit.Check if you run itEPSS 0.46%May 14, 2026
- Medium5.3The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5.Check if you run itEPSS 0.43%May 14, 2026
- Medium4.3The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 5.3.2.Check if you run itEPSS 0.15%May 14, 2026
- High7.2The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31.Check if you run itEPSS 0.32%May 14, 2026
- Low3.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…Check if you run itEPSS 0.26%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 15.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…Check if you run itEPSS 0.27%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditio…Check if you run itEPSS 0.39%May 14, 2026
- Medium5.4The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data…Check if you run itEPSS 0.24%May 14, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-controlled key in all versio…Check if you run itEPSS 0.40%May 14, 2026
- Medium4.3The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9.Check if you run itEPSS 0.47%May 14, 2026
- Critical9.8The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1.Patch nowKEVEPSS 3.01%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- High7.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.53%May 13, 2026
- High7.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.45%May 13, 2026
- Medium4.3ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.27%May 13, 2026
- Medium6.6PlaywrightCapture is a simple replacement for splash using playwright.Check if you run itEPSS 0.54%May 13, 2026