Vulnerabilities
Summary — last 7 days
New vulnerabilities2,729▼ 513 vs. last week
Critical / high1,298▼ 212 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)225▼ 276 vs. last week
402,888 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.5) | 0.32% | — | Norvis BackupAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions. | |
| Deferred | High (7.5) | 0.32% | — | Museder RestoreoneAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions. | |
| Deferred | High (7.5) | 0.30% | — | WXD Backup LiteAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions. | |
| Deferred | High (7.5) | 0.32% | — | SafesnapAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions. | |
| Deferred | Critical (9.3) | 0.25% | — | User Subscriptions FormAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions. | |
| Deferred | High (7.1) | 0.19% | — | CF7 ViewsAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions. | |
| Deferred | High (7.1) | 0.19% | — | Blog Posts AND Category Filter FOR ElementorAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions. | |
| Deferred | Medium (6.5) | 0.25% | — | Themetechmount TruebookerAI | 10/6/2026 | 10/6/2026 | Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. | |
| Deferred | Critical (9.8) | 0.34% | — | Data443 Gdpr FrameworkAI | 10/6/2026 | 10/6/2026 | Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. | |
| Deferred | High (7.5) | 0.30% | — | Advanced Posts ListingAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions. | |
| Deferred | Critical (9.3) | 0.33% | — | Sendpress NewslettersAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions. | |
| Deferred | High (7.5) | 0.39% | — | Wclovers Woocommerce Multivendor MarketplaceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. | |
| Deferred | High (8.8) | 0.42% | — | Simple JWT LoginAI | 10/6/2026 | 10/6/2026 | Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions. | |
| Deferred | High (8.6) | 0.36% | — | Simplefilelist Simple File ListAI | 10/6/2026 | 10/6/2026 | Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions. | |
| Deferred | Medium (5.3) | 0.25% | — | Mailjet Email MarketingAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions. | |
| Deferred | High (7.1) | 0.25% | — | E4jconnect VikrentcarAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions. | |
| Deferred | Medium (6.5) | 0.22% | — | Frontend PMAI | 10/6/2026 | 10/6/2026 | Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions. | |
| Deferred | Medium (6.5) | 0.29% | — | 10web Social Photo FeedAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions. | |
| Deferred | Critical (9.3) | 0.25% | — | Gmedia Photo GalleryAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions. | |
| Deferred | High (7.1) | 0.19% | — | Nicdark Hotel BookingAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions. | |
| Deferred | High (7.1) | 0.19% | — | Document GalleryAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions. | |
| Deferred | High (7.1) | 0.19% | — | Kainelabs YouzifyAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions. | |
| Deferred | High (7.1) | 0.19% | — | Ansar ImportAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes <= 2.1.2 versions. | |
| Deferred | High (8) | 0.38% | — | TabsAI | 10/6/2026 | 10/6/2026 | Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions. | |
| Deferred | High (8.8) | 0.34% | — | JobzillaAI | 10/6/2026 | 10/6/2026 | Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions. |