Fast, deterministic intelligence across 396,536 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions....
Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions....
Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions....
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session...
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session...
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions....
Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions....
Unauthenticated SQL Injection in Bookly <= 27.7 versions....
Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions....
Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions....
Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions....
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions....
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions....
Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions....
Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions....
Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions....
Editor Arbitrary File Upload in Mailster <= 4.1.17 versions....
Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions....
Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs....
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services....
The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying tha...
The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic functi...
The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and includi...