Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.4TinyMCE is an open source rich text editor.EPSS 0.3%May 28, 2026
- High8.2Python Liquid is a Python engine for the Liquid template language.EPSS 0.5%May 28, 2026
- Medium4.3The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14.May 28, 2026
- Medium6.5The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order_by' parameter in all ver…EPSS 0.6%May 28, 2026
- Medium6.3A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release.May 28, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'User-Agent' header in all versions up to, and including, 5.4.11 due t…EPSS 0.5%May 28, 2026
- High7.2The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file_upload' parameter in all v…EPSS 0.5%May 28, 2026
- Critical9.8Velocity.js is a JavaScript implementation of the Apache Velocity template engine.EPSS 0.6%May 26, 2026
- Medium5.9Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion.EPSS 0.5%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium5.3Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium6.5view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.EPSS 0.4%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Critical9.3Lumiverse is a full-featured AI chat application.EPSS 0.4%May 26, 2026
- High7.5Banks generates meaningful LLM prompts using a template language that makes sense.EPSS 0.7%May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.EPSS 0.4%May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.EPSS 0.4%May 26, 2026
- High7.5Algernon is a small self-contained pure-Go web server.EPSS 0.4%May 26, 2026
- High8.7Twenty is an open source CRM.EPSS 0.4%May 26, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic.EPSS 0.9%May 25, 2026
- Low2.0A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0.May 25, 2026
- Low2.9A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426.May 24, 2026
- High8.8The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1.EPSS 0.4%May 23, 2026