Vulnerabilities
Summary — last 7 days
New vulnerabilities3,237▲ 675 vs. last week
Critical / high1,517▲ 134 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)241▲ 227 vs. last week
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (4.3) | 0.60% | — | Datalogics Ecommerce DeliveryAI | 9/19/2026 | 9/21/2026 | The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.65. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with… | |
| Deferred | Critical (9.8) | 0.54% | — | Datalogics Ecommerce DeliveryAI | 6/15/2026 | 6/17/2026 | Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. | |
| Deferred | Critical (9.8) | 0.83% | 💥 PoC | Datalogics Ecommerce DeliveryAI | 3/11/2026 | 6/17/2026 | The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option `datalogics_token` without verification. This token is subsequently used for authentication in a protected endpoint that allows users to perform arbitrary WordPress… | |
| Modified | Medium (6.5) | 0.74% | — | Datalogic DXU | 1/1/2022 | 6/17/2026 | The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or disclosure of configuration settings. | |
| Modified | High (8.8) | 2.4% | — | Datalogic Av7000 Firmware | 8/30/2019 | 6/17/2026 | Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code. |