Vulnerabilities

Summary — last 7 days

New vulnerabilities2,739▼ 510 vs. last week
Critical / high1,303▼ 212 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)225▼ 276 vs. last week
–

402,904 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
DeferredHigh (7.5)0.30%—Advanced Posts ListingAI10/6/202610/6/2026
Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.
DeferredCritical (9.3)0.33%—Sendpress NewslettersAI10/6/202610/6/2026
Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.
DeferredHigh (7.5)0.39%—Wclovers Woocommerce Multivendor MarketplaceAI10/6/202610/6/2026
Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.
DeferredHigh (8.8)0.42%—Simple JWT LoginAI10/6/202610/6/2026
Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.
DeferredHigh (8.6)0.36%—Simplefilelist Simple File ListAI10/6/202610/6/2026
Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.
DeferredMedium (5.3)0.25%—Mailjet Email MarketingAI10/6/202610/6/2026
Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.
DeferredHigh (7.1)0.25%—E4jconnect VikrentcarAI10/6/202610/6/2026
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.
DeferredMedium (6.5)0.22%—Frontend PMAI10/6/202610/6/2026
Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.
DeferredMedium (6.5)0.29%—10web Social Photo FeedAI10/6/202610/6/2026
Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.
DeferredCritical (9.3)0.25%—Gmedia Photo GalleryAI10/6/202610/6/2026
Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
DeferredHigh (7.1)0.19%—Nicdark Hotel BookingAI10/6/202610/6/2026
Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.
DeferredHigh (7.1)0.19%—Document GalleryAI10/6/202610/6/2026
Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions.
DeferredHigh (7.1)0.19%—Kainelabs YouzifyAI10/6/202610/6/2026
Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.
DeferredHigh (7.1)0.19%—Ansar ImportAI10/6/202610/6/2026
Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor &amp; Themes <= 2.1.2 versions.
DeferredHigh (8)0.38%—TabsAI10/6/202610/6/2026
Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.
DeferredHigh (8.8)0.34%—JobzillaAI10/6/202610/6/2026
Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.
DeferredHigh (8.8)0.25%—Tourfic PROAI10/6/202610/6/2026
Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.
DeferredCritical (10)0.29%—Doctreat CoreAI10/6/202610/6/2026
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
DeferredMedium (5.3)0.36%—Bestwebsoft CaptchaAI10/6/202610/6/2026
Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.
DeferredHigh (8.5)0.29%—Buddyboss PlatformAI10/6/202610/6/2026
Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
DeferredCritical (10)0.42%—DoctreatAI10/6/202610/6/2026
Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
DeferredHigh (7.5)0.48%—GraphinaAI10/6/202610/6/2026
Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.
RejectedUnscored0.19%—Cleantalk Security Malware ScanAI10/6/202610/7/2026
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive.
DeferredMedium (6.5)0.41%—Wpbase CacheAI10/6/202610/6/2026
Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.
DeferredHigh (7.1)0.25%—Reputeinfosystems ArformsAI10/6/202610/6/2026
Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.