CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Car Zone versions up to 3.7 have a vulnerability that allows unauthenticated arbitrary file deletion.
Genemy versions up to 1.6.6 contain a vulnerability that allows subscriber privilege escalation.
Wanium versions up to 1.9.8 are vulnerable to unauthenticated local file inclusion.
Subscriber SQL Injection vulnerability in WordPress Events Calendar Plugin versions <= 2.7.2 allows attackers to manipulate SQL queries.
The WordPress & WooCommerce Scraper plugin versions <= 1.0.7 allows unauthenticated arbitrary file downloads. This issue arises from improper input validation.
There is an unauthenticated local file inclusion vulnerability in Food Drop <= 1.3 versions.
There is an unauthenticated local file inclusion vulnerability in Especio versions <= 1.0.
Deliciosa versions up to 1.10.0 are vulnerable to unauthenticated local file inclusion.
There is a vulnerability in Corbesier versions <= 1.15.0 that allows unauthenticated local file inclusion.
There is an unauthenticated local file inclusion vulnerability in CopyPress versions <= 1.4.5.
There is an unauthenticated local file inclusion vulnerability in Ingenioso versions <= 1.14.0.
Iona versions up to 1.0.8 are vulnerable to unauthenticated local file inclusion.
There is an unauthenticated local file inclusion vulnerability in MaxiNet versions <= 1.2.10.
There is an unauthenticated local file inclusion vulnerability in Nexio versions <= 1.10.0.
There is an unauthenticated local file inclusion vulnerability in Planty versions <= 1.14.0.
There is an unauthenticated local file inclusion vulnerability in AirSupply versions <= 2.0.0.
There is an unauthenticated local file inclusion vulnerability in Raider Spirit <= 1.1.2 versions.
There is an unauthenticated local file inclusion vulnerability in Rosaleen versions <= 2.8.
Versions of Modernee <= 1.6.0 are vulnerable to unauthenticated local file inclusion.
Versions of Qreatix <= 1.9.4 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts in the context of the victim's browser.