Vulnerabilities
Summary — last 7 days
New vulnerabilities2,715▼ 529 vs. last week
Critical / high1,290▼ 220 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)225▼ 276 vs. last week
402,871 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.25% | — | WPG Demos Woocommerce Simple AuctionsAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions. | |
| Deferred | High (7.1) | 0.25% | — | Video Background BlockAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions. | |
| Deferred | High (7.1) | 0.25% | — | Wpsocialrocket Social RocketAI | 10/6/2026 | 10/7/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.5. | |
| Deferred | Critical (9.3) | 0.33% | — | Armember PremiumAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions. | |
| Deferred | High (8.5) | 0.29% | — | Udesign CoreAI | 10/6/2026 | 10/6/2026 | Subscriber SQL Injection in UDesign Core <= 4.15.0 versions. | |
| Deferred | Critical (9.3) | 0.25% | — | PortoAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions. | |
| Deferred | High (8.5) | 0.29% | — | Cridio ListingproAI | 10/6/2026 | 10/6/2026 | Subscriber SQL Injection in ListingPro <= 2.9.12 versions. | |
| Deferred | High (7.5) | 0.32% | — | SnapshotifyAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions. | |
| Deferred | High (7.5) | 0.32% | — | Norvis BackupAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions. | |
| Deferred | High (7.5) | 0.32% | — | Museder RestoreoneAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions. | |
| Deferred | High (7.5) | 0.30% | — | WXD Backup LiteAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions. | |
| Deferred | High (7.5) | 0.32% | — | SafesnapAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions. | |
| Deferred | Critical (9.3) | 0.25% | — | User Subscriptions FormAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions. | |
| Deferred | High (7.1) | 0.19% | — | CF7 ViewsAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions. | |
| Deferred | High (7.1) | 0.19% | — | Blog Posts AND Category Filter FOR ElementorAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions. | |
| Deferred | Medium (6.5) | 0.25% | — | Themetechmount TruebookerAI | 10/6/2026 | 10/6/2026 | Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. | |
| Deferred | Critical (9.8) | 0.34% | — | Data443 Gdpr FrameworkAI | 10/6/2026 | 10/6/2026 | Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. | |
| Deferred | High (7.5) | 0.30% | — | Advanced Posts ListingAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions. | |
| Deferred | Critical (9.3) | 0.33% | — | Sendpress NewslettersAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions. | |
| Deferred | High (7.5) | 0.39% | — | Wclovers Woocommerce Multivendor MarketplaceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. | |
| Deferred | High (8.8) | 0.42% | — | Simple JWT LoginAI | 10/6/2026 | 10/6/2026 | Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions. | |
| Deferred | High (8.6) | 0.36% | — | Simplefilelist Simple File ListAI | 10/6/2026 | 10/6/2026 | Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions. | |
| Deferred | Medium (5.3) | 0.25% | — | Mailjet Email MarketingAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions. | |
| Deferred | High (7.1) | 0.25% | — | E4jconnect VikrentcarAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions. | |
| Deferred | Medium (6.5) | 0.22% | — | Frontend PMAI | 10/6/2026 | 10/6/2026 | Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions. |