National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,350 matching advisories
Page 155 of 1,890
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a...

📅 2026-01-22 Inspect Dossier →
CWE-89 Remote (AV:N)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra P...

📅 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boopathi Rajan WP Test Email wp-test-email allows Reflected XSS.This issue affects WP Test Email: ...

📅 2026-01-22 Inspect Dossier →
CVE-2025-69101 CRITICAL 9.8
CWE-288 Remote (AV:N)

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreap_core allows Authentication Abuse.This issue affects Workreap Core: from n/a through <= 3.4.1...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North north-wp allows PHP Local File Inclusion.This issue affects No...

📅 2026-01-22 Inspect Dossier →
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5....

📅 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWave Hide My WP hide_my_wp allows Reflected XSS.This issue affects Hide My WP: from n/a through ...

📅 2026-01-22 Inspect Dossier →
CWE-22 Remote (AV:N)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through <= 1.9.9....

📅 2026-01-22 Inspect Dossier →
CVE-2025-69095 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reservation Plug...

📅 2026-01-22 Inspect Dossier →
CVE-2025-69079 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Sound | Musical Instruments Online Store musicplace allows Object Injection.This issue affects Sound | Musical Instruments Online Store: fro...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Malta malta allows PHP Local File Inclusion.This issue affects Mal...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hobo hobo allows PHP Local File Inclusion.This issue affects Hobo:...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Modern Housewife modernhousewife allows PHP Local File Inclusion.T...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Yolox yolox allows PHP Local File Inclusion.This issue affects Yol...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Pearson Specter pearsonspecter allows PHP Local File Inclusion.Thi...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Piqes piqes allows PHP Local File Inclusion.This issue affects Piq...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Prider prider allows PHP Local File Inclusion.This issue affects P...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes TanTum tantum allows PHP Local File Inclusion.This issue affects T...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affec...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Muji muji allows PHP Local File Inclusion.This issue affects Muji:...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tails tails allows PHP Local File Inclusion.This issue affects Tai...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Indoor Plants indoor-plants allows PHP Local File Inclusion.This i...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Snow Mountain snowmountain allows PHP Local File Inclusion.This is...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Pets Land petsland allows PHP Local File Inclusion.This issue affe...

📅 2026-01-22 Inspect Dossier →
Showing Page 155 of 1,890 • 45,350 matching CVEs (out of 396,747 NIST advisories)