Vulnerabilities
Summary — last 7 days
New vulnerabilities5,243▲ 2,495 vs. last week
Critical / high2,940▲ 1,611 vs. last week
New active exploitation (KEV)11▲ 7 vs. last week
Unscored (no CVSS)219▲ 45 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.3) | 0.24% | — | Wpdreams Ajax Search PROAI | 10/9/2026 | 10/9/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1. | |
| Modified | High (7.5) | 0.55% | — | Ajax Search Project Ajax Search | 3/15/2023 | 6/17/2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions. |