Vulnerabilities
Summary — last 7 days
New vulnerabilities4,657▼ 595 vs. last week
Critical / high1,876▼ 1,141 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)735▲ 629 vs. last week
More filters
53 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.8) | 0.70% | — | Wpaffiliatemanager Affiliates Manager | 9/3/2019 | 6/17/2026 | The affiliates-manager plugin before 2.6.6 for WordPress has CSRF. | |
| Modified | Medium (6.1) | 2.9% | Exploit | 2kblater 2KB Amazon Affiliates Store | 9/28/2017 | 6/17/2026 | Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php. | |
| Modified | High (7.5) | 1.2% | Exploit | Punres Affiliates MOD | 7/2/2009 | 6/16/2026 | Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the (1) in or (2) out parameter. |