Vulnerabilities
Summary — last 7 days
New vulnerabilities2,829▼ 255 vs. last week
Critical / high1,324▼ 180 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)214▼ 107 vs. last week
403,376 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 0.48% | — | Metabox Meta BOX AIOAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions. | |
| Deferred | Critical (9.9) | 0.48% | — | Amentotech WorkreapAI | 10/6/2026 | 10/6/2026 | Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. | |
| Deferred | High (7.1) | 0.25% | — | Midtrans WoocommerceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions. | |
| Deferred | Critical (9.9) | 0.48% | — | TaskbotAI | 10/6/2026 | 10/6/2026 | Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. | |
| Deferred | Medium (6.5) | 0.26% | — | WappointmentAI | 10/6/2026 | 10/6/2026 | Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions. | |
| Deferred | Critical (9.9) | 0.45% | — | WP DuplicateAI | 10/6/2026 | 10/6/2026 | Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions. | |
| Deferred | Medium (6.5) | 0.33% | — | Piotnet Addons FOR ElementorAI | 10/6/2026 | 10/6/2026 | Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions. | |
| Deferred | Critical (9.8) | 0.45% | — | TaskbotAI | 10/6/2026 | 10/6/2026 | Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions. | |
| Deferred | High (7.7) | 0.45% | — | JobsAI | 10/6/2026 | 10/6/2026 | Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions. | |
| Deferred | High (7.5) | 0.32% | — | Payplug FOR WoocommerceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions. | |
| Deferred | High (7.1) | 0.24% | — | Storegrowth Smart Sales Booster FOR WoocommerceAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions. | |
| Deferred | Medium (6.5) | 0.28% | — | APP FOR CloudflareAI | 10/6/2026 | 10/6/2026 | Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. | |
| Deferred | High (7.1) | 0.24% | — | Thememove EdumallAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions. | |
| Deferred | High (8.5) | 0.34% | — | Xtendify WofficeAI | 10/6/2026 | 10/6/2026 | Subscriber SQL Injection in Woffice <= 5.4.35 versions. | |
| Deferred | Critical (9.3) | 0.38% | — | Fs-code BookneticAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions. | |
| Deferred | High (7.1) | 0.24% | — | Bestwebsoft Contact Form TO DBAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions. | |
| Deferred | High (7.1) | 0.24% | — | Database FOR CF7AI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions. | |
| Deferred | High (7.1) | 0.31% | — | Wise ChatAI | 10/6/2026 | 10/7/2026 | Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3. | |
| Deferred | High (7.2) | 0.34% | — | Edwiser BridgeAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions. | |
| Deferred | High (7.2) | 0.26% | — | InstapageAI | 10/6/2026 | 10/6/2026 | Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions. | |
| Deferred | Medium (6.5) | 0.21% | — | WC Fields FactoryAI | 10/6/2026 | 10/6/2026 | Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions. | |
| Deferred | High (7.1) | 0.24% | — | Prestalife Product DesignerAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions. | |
| Deferred | High (8.8) | 0.74% | — | Elegantthemes DiviAI | 10/6/2026 | 10/6/2026 | Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions. | |
| Deferred | High (7.1) | 0.24% | — | Http Requests ManagerAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions. | |
| Deferred | High (7.1) | 0.24% | — | WplmsAI | 10/6/2026 | 10/6/2026 | Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions. |