Vulnerabilities
Summary — last 7 days
New vulnerabilities4,632▼ 625 vs. last week
Critical / high1,863▼ 1,157 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)735▲ 629 vs. last week
More filters
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 0.46% | — | Itthinx AffiliatesAI | 10/14/2026 | 10/15/2026 | Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1. | |
| Deferred | Critical (9.3) | 0.40% | — | Wpaffiliatemanager Affiliates ManagerAI | 8/18/2026 | 8/20/2026 | Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions. | |
| Deferred | Critical (9.8) | 0.38% | — | Fantasticplugins Sumo Affiliates PROAI | 3/25/2026 | 6/17/2026 | Deserialization of Untrusted Data vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Object Injection.This issue affects SUMO Affiliates Pro: from n/a through < 11.4.0. | |
| Deferred | Critical (10) | 0.52% | — | Fantasticplugins Sumo Affiliates PROAI | 6/9/2025 | 6/17/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO Affiliates Pro: from n/a through < 11.1.0. | |
| Modified | Critical (9.8) | 0.81% | — | Activedesign Full Affiliates | 9/15/2023 | 6/17/2026 | Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent(). |