Vulnerabilities
Summary — last 7 days
New vulnerabilities4,801▼ 476 vs. last week
Critical / high1,890▼ 1,156 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)818▲ 709 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 0.56% | — | Spirit FrameworkAI | 10/3/2025 | 10/12/2026 | The Spirit Framework plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.2.14. This is due to the custom_actions() function not properly validating a user's identity prior to authenticating them to the site. This makes it possible for unauthenticated attackers to log in… |