Vulnerabilities
Summary — last 7 days
New vulnerabilities3,454▼ 1,360 vs. last week
Critical / high1,321▼ 1,441 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)693▲ 630 vs. last week
More filters
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.4) | 0.20% | — | Fullworksplugins Quick Paypal PaymentsAI | 10/16/2026 | 10/16/2026 | The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level… | |
| Analyzed | Medium (5.9) | 0.69% | — | Microsoft Windows 11 23h2Microsoft Windows 11 24h2Microsoft Windows 11 25h2Microsoft Windows 11 26h1+6 | 10/13/2026 | 10/16/2026 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | |
| Awaiting Analysis | Critical (9.8) | 0.99% | — | Microsoft QuicAI | 10/13/2026 | 10/16/2026 | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | |
| Undergoing Analysis | High (7.5) | 0.52% | — | Microsoft QuicAI | 10/13/2026 | 10/13/2026 | Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network. | |
| Deferred | Medium (5.3) | 0.18% | — | Fullworksplugins Quick Paypal PaymentsAI | 10/13/2026 | 10/13/2026 | Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3. |