Vulnerabilities
Summary — last 7 days
New vulnerabilities4,653▼ 728 vs. last week
Critical / high1,752▼ 1,311 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)973▲ 874 vs. last week
More filters
413,873 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 0.31% | — | Axiomthemes KickerAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | — | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Original <= 1.9.0 versions. | |
| Deferred | Critical (9.8) | 0.33% | — | AnestaAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. | |
| Deferred | High (8.1) | 0.28% | — | AmbientAI | 10/10/2026 | 10/13/2026 | Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | FC UnitedAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | ShiftcvAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | WindsorAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Windsor <= 2.10 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | Education CenterAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | Drone MediaAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions. | |
| Deferred | Medium (6.8) | 0.33% | — | Prestoplayer Presto Player PROAI | 10/10/2026 | 10/13/2026 | Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions. | |
| Deferred | Medium (5.3) | 0.20% | — | Yith Woocommerce Product ADD ONSAI | 10/10/2026 | 10/13/2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0. | |
| Deferred | High (7.5) | 0.28% | — | Incsub ForminatorAI | 10/10/2026 | 10/13/2026 | Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions. | |
| Deferred | High (7.2) | 0.30% | — | Wpml Woocommerce Multilingual AND MulticurrencyAI | 10/10/2026 | 10/13/2026 | Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions. | |
| Deferred | Critical (9.9) | 0.27% | — | Creator LMSAI | 10/10/2026 | 10/13/2026 | Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | Asia GardenAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | N7 Golf Club Sports EventsAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | InvetexAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Invetex <= 2.18 versions. | |
| Deferred | Critical (9.8) | 0.31% | — | LAW OfficeAI | 10/10/2026 | 10/13/2026 | Unauthenticated PHP Object Injection in Law Office <= 3.20 versions. | |
| Deferred | High (7.3) | 0.22% | — | Barcode Scanner With Inventory Order ManagerAI | 10/10/2026 | 10/13/2026 | Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. | |
| Deferred | High (8.5) | 0.28% | — | Barcode Scanner With Inventory AND Order ManagerAI | 10/10/2026 | 10/13/2026 | Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. | |
| Deferred | High (7.1) | 0.18% | — | Barcode Scanner With Inventory AND Order ManagerAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. | |
| Deferred | High (8.1) | 0.28% | — | KuteshopAI | 10/10/2026 | 10/13/2026 | Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. | |
| Deferred | High (7.1) | 0.18% | — | KuteshopAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions. | |
| Deferred | High (8.1) | 0.28% | — | BoutiqueAI | 10/10/2026 | 10/13/2026 | Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. | |
| Deferred | Medium (6.5) | 0.21% | — | BoutiqueAI | 10/10/2026 | 10/13/2026 | Unauthenticated Content Injection in Boutique <= 2.3.3 versions. |