Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginKEVEPSS 0.3%Oct 7, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVOct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVOct 6, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityKEVEPSS 40.0%Sep 22, 2026
- UnknownWordPress 7.1.1 Maintenance and Security ReleaseSep 18, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPKEVEPSS 2.3%Aug 28, 2026
- UnknownMiniOrange saml_sp_single_sign_on Incorrect Privilege AssignmentKEVEPSS 0.4%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationKEVEPSS 1.9%Aug 21, 2026
- UnknownCritical Unauthenticated File Upload to RCE in Elementor Pro PluginKEVEPSS 2.0%Aug 19, 2026
- UnknownCVE-2026-64638 is listed by WordPress 7.0.3 Released: 12 Vulnerabilities Found and Fixed.EPSS 0.9%Aug 6, 2026
- UnknownCVE-2026-18072 is listed by Protect The Shire solves one problem, but risks making another worse.EPSS 3.0%Jul 30, 2026
- UnknownCVE-2026-15000 is listed by Protect The Shire solves one problem, but risks making another worse.EPSS 0.6%Jul 30, 2026
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityKEVEPSS 10.6%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityKEVEPSS 5.3%Jul 17, 2026
14 records · page 1 of 1
PreviousNext