Vulnerabilities
Summary — last 7 days
New vulnerabilities4,672▼ 683 vs. last week
Critical / high1,758▼ 1,288 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)973▲ 874 vs. last week
More filters
413,893 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.18% | — | Slider BY 10webAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions. | |
| Deferred | High (7.1) | 0.18% | — | Food MenuAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions. | |
| Deferred | High (7.5) | 0.25% | — | — | 10/10/2026 | 10/13/2026 | Unauthenticated Broken Access Control in DK <= 3.2.1 versions. | |
| Deferred | High (7.5) | 0.25% | — | Grand NewsAI | 10/10/2026 | 10/13/2026 | Unauthenticated Broken Access Control in Grand News <= 3.4 versions. | |
| Deferred | High (8.1) | 0.35% | — | Themerex Kids CareAI | 10/10/2026 | 10/13/2026 | Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions. | |
| Deferred | High (7.1) | 0.18% | — | Themeum Tutor LMSAI | 10/10/2026 | 10/13/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0. | |
| Deferred | High (7.1) | 0.18% | — | Foliovision FV PlayerAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions. | |
| Deferred | High (7.1) | 0.18% | — | Social Share Icons AND Social Share ButtonsAI | 10/10/2026 | 10/13/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.7.5. | |
| Deferred | Critical (10) | 0.39% | — | SitevaultAI | 10/10/2026 | 10/13/2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration & Cloning: from n/a through 1.5.19. | |
| Deferred | High (7.1) | 0.18% | — | Tielabs JannahAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions. | |
| Deferred | High (8.5) | 0.34% | — | Events ManagerAI | 10/10/2026 | 10/13/2026 | Subscriber SQL Injection in Events Manager <= 7.4.6 versions. | |
| Deferred | High (7.1) | 0.18% | — | Qode Real EstateAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions. | |
| Deferred | High (7.1) | 0.18% | — | Qode MusicAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions. | |
| Deferred | High (7.5) | 0.30% | — | WEB Plura Backup AND Restore ManagerAI | 10/10/2026 | 10/13/2026 | Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions. | |
| Deferred | Medium (5.9) | 0.26% | — | Swish Migrate AND BackupAI | 10/10/2026 | 10/13/2026 | Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions. | |
| Deferred | Medium (6.5) | 0.28% | — | Jetpack VideopressAI | 10/10/2026 | 10/13/2026 | Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions. | |
| Deferred | High (7.7) | 0.45% | — | PeepsoAI | 10/10/2026 | 10/13/2026 | Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions. | |
| Deferred | High (7.1) | 0.18% | — | Jotform AI ChatbotAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions. | |
| Deferred | High (7.6) | 0.29% | — | PubjetAI | 10/10/2026 | 10/13/2026 | Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions. | |
| Deferred | High (8.1) | 0.33% | — | WordableAI | 10/10/2026 | 10/13/2026 | Subscriber Broken Access Control in Wordable <= 8.2.10 versions. | |
| Deferred | Critical (9.3) | 0.38% | — | Elex Woocommerce Advanced Bulk Edit Products Prices AttributesAI | 10/10/2026 | 10/13/2026 | Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions. | |
| Deferred | High (8.1) | 0.35% | — | WpsectionAI | 10/10/2026 | 10/13/2026 | Subscriber Broken Access Control in WPSection <= 1.5.1 versions. | |
| Deferred | High (8.1) | 0.46% | — | Everest BackupAI | 10/10/2026 | 10/13/2026 | Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions. | |
| Deferred | Critical (9.8) | 0.45% | — | AiwuAI | 10/10/2026 | 10/13/2026 | Subscriber Privilege Escalation in AIWU <= 1.5.9 versions. | |
| Deferred | High (7.1) | 0.18% | — | Antonbond Additional Order Filters FOR WoocommerceAI | 10/10/2026 | 10/13/2026 | Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions. |