Vulnerabilities
Summary — last 7 days
New vulnerabilities2,712▼ 359 vs. last week
Critical / high1,261▼ 231 vs. last week
New active exploitation (KEV)8→ no change vs. last week
Unscored (no CVSS)213▼ 109 vs. last week
403,189 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.8) | 0.34% | — | JobzillaAI | 10/6/2026 | 10/6/2026 | Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions. | |
| Deferred | High (8.8) | 0.25% | — | Tourfic PROAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions. | |
| Deferred | Critical (10) | 0.29% | — | Doctreat CoreAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions. | |
| Deferred | Medium (5.3) | 0.36% | — | Bestwebsoft CaptchaAI | 10/6/2026 | 10/6/2026 | Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions. | |
| Deferred | High (8.5) | 0.29% | — | Buddyboss PlatformAI | 10/6/2026 | 10/6/2026 | Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions. | |
| Deferred | Critical (10) | 0.42% | — | DoctreatAI | 10/6/2026 | 10/6/2026 | Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions. | |
| Deferred | High (7.5) | 0.48% | — | GraphinaAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions. | |
| Rejected | Unscored | 0.19% | — | Cleantalk Security Malware ScanAI | 10/6/2026 | 10/7/2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive. | |
| Deferred | Medium (6.5) | 0.41% | — | Wpbase CacheAI | 10/6/2026 | 10/6/2026 | Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions. | |
| Deferred | High (7.1) | 0.25% | — | Reputeinfosystems ArformsAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. | |
| Deferred | High (7.2) | 0.46% | — | ChallanAI | 10/6/2026 | 10/6/2026 | Shop Manager Privilege Escalation in Challan <= 3.7.88 versions. | |
| Deferred | Critical (9.3) | 0.30% | — | Radiustheme Radius BookingAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions. | |
| Deferred | Medium (6.5) | 0.33% | — | Autoship CloudAI | 10/6/2026 | 10/6/2026 | Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1. | |
| Deferred | Critical (9.8) | 0.48% | — | Metabox Meta BOX AIOAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions. | |
| Deferred | Critical (9.9) | 0.48% | — | Amentotech WorkreapAI | 10/6/2026 | 10/6/2026 | Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. | |
| Deferred | High (7.1) | 0.25% | — | Midtrans WoocommerceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions. | |
| Deferred | Critical (9.9) | 0.48% | — | TaskbotAI | 10/6/2026 | 10/6/2026 | Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. | |
| Deferred | Medium (6.5) | 0.26% | — | WappointmentAI | 10/6/2026 | 10/6/2026 | Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions. | |
| Deferred | Critical (9.9) | 0.45% | — | WP DuplicateAI | 10/6/2026 | 10/6/2026 | Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions. | |
| Deferred | Medium (6.5) | 0.33% | — | Piotnet Addons FOR ElementorAI | 10/6/2026 | 10/6/2026 | Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions. | |
| Deferred | Critical (9.8) | 0.45% | — | TaskbotAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions. | |
| Deferred | High (7.7) | 0.45% | — | JobsAI | 10/6/2026 | 10/6/2026 | Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions. | |
| Deferred | High (7.5) | 0.32% | — | Payplug FOR WoocommerceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions. | |
| Deferred | High (7.1) | 0.24% | — | Storegrowth Smart Sales Booster FOR WoocommerceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions. | |
| Deferred | Medium (6.5) | 0.28% | — | APP FOR CloudflareAI | 10/6/2026 | 10/6/2026 | Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. |