Vulnerabilities
Summary — last 7 days
New vulnerabilities5,029▲ 194 vs. last week
Critical / high2,139▼ 635 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)773▲ 710 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.3) | 1.0% | Exploit | Trinity AudioAI | 10/11/2025 | 10/8/2026 | The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on install. This makes it possible for unauthenticated attackers to… | |
| Deferred | Medium (4.3) | 0.20% | PoC | Trinityaudio Text TO SpeechAI | 10/4/2025 | 10/11/2026 | The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This makes it possible for… | |
| Modified | Medium (5) | 3.4% | Exploit | Centrinity FirstclassAI | 12/31/2003 | 6/16/2026 | Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the URL and checking all of the search option checkboxes and leaving the text field blank, which will return all files in the searched directory. | |
| Modified | Medium (5) | 3.1% | Exploit | Centrinity Firstclass Intranet Server | 6/27/2000 | 6/16/2026 | FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. |