Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions....
Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions....
Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5....
Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1....
Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9....
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0....
Unauthenticated SQL Injection in Advanced Ads – Tracking < 3.0.7 versions....
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions....
Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions....
Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions....
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions....
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions....
Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions....
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions....
Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions....
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions....
A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or compromised remote SFTP server write files outside the configured local destina...
Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions....
Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions....
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions....
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions....
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions....
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a ...
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions....