Vulnerabilities
Summary — last 7 days
New vulnerabilities4,632▼ 625 vs. last week
Critical / high1,863▼ 1,157 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)735▲ 629 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.5) | 0.18% | — | ThirstyaffiliatesAI | 10/17/2026 | 10/19/2026 | The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics. | |
| Deferred | Critical (9.8) | 0.46% | — | Itthinx AffiliatesAI | 10/14/2026 | 10/15/2026 | Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1. |