Vulnerabilities
Summary — last 7 days
New vulnerabilities2,736▼ 336 vs. last week
Critical / high1,272▼ 222 vs. last week
New active exploitation (KEV)8→ no change vs. last week
Unscored (no CVSS)213▼ 108 vs. last week
403,222 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.5) | 0.22% | — | Frontend PMAI | 10/6/2026 | 10/6/2026 | Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions. | |
| Deferred | Medium (6.5) | 0.29% | — | 10web Social Photo FeedAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions. | |
| Deferred | Critical (9.3) | 0.25% | — | Gmedia Photo GalleryAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions. | |
| Deferred | High (7.1) | 0.19% | — | Nicdark Hotel BookingAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions. | |
| Deferred | High (7.1) | 0.19% | — | Document GalleryAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions. | |
| Deferred | High (7.1) | 0.19% | — | Kainelabs YouzifyAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions. | |
| Deferred | High (7.1) | 0.19% | — | Ansar ImportAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes <= 2.1.2 versions. | |
| Deferred | High (8) | 0.38% | — | TabsAI | 10/6/2026 | 10/6/2026 | Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions. | |
| Deferred | High (8.8) | 0.34% | — | JobzillaAI | 10/6/2026 | 10/6/2026 | Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions. | |
| Deferred | High (8.8) | 0.25% | — | Tourfic PROAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions. | |
| Deferred | Critical (10) | 0.29% | — | Doctreat CoreAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions. | |
| Deferred | Medium (5.3) | 0.36% | — | Bestwebsoft CaptchaAI | 10/6/2026 | 10/6/2026 | Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions. | |
| Deferred | High (8.5) | 0.29% | — | Buddyboss PlatformAI | 10/6/2026 | 10/6/2026 | Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions. | |
| Deferred | Critical (10) | 0.42% | — | DoctreatAI | 10/6/2026 | 10/6/2026 | Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions. | |
| Deferred | High (7.5) | 0.48% | — | GraphinaAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions. | |
| Rejected | Unscored | 0.19% | — | Cleantalk Security Malware ScanAI | 10/6/2026 | 10/7/2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive. | |
| Deferred | Medium (6.5) | 0.41% | — | Wpbase CacheAI | 10/6/2026 | 10/6/2026 | Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions. | |
| Deferred | High (7.1) | 0.25% | — | Reputeinfosystems ArformsAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. | |
| Deferred | High (7.2) | 0.46% | — | ChallanAI | 10/6/2026 | 10/6/2026 | Shop Manager Privilege Escalation in Challan <= 3.7.88 versions. | |
| Deferred | Critical (9.3) | 0.30% | — | Radiustheme Radius BookingAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions. | |
| Deferred | Medium (6.5) | 0.33% | — | Autoship CloudAI | 10/6/2026 | 10/6/2026 | Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1. | |
| Deferred | Critical (9.8) | 0.48% | — | Metabox Meta BOX AIOAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions. | |
| Deferred | Critical (9.9) | 0.48% | — | Amentotech WorkreapAI | 10/6/2026 | 10/6/2026 | Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. | |
| Deferred | High (7.1) | 0.25% | — | Midtrans WoocommerceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions. | |
| Deferred | Critical (9.9) | 0.48% | — | TaskbotAI | 10/6/2026 | 10/6/2026 | Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. |