Vulnerabilities
Summary — last 7 days
New vulnerabilities5,211▲ 2,445 vs. last week
Critical / high2,955▲ 1,625 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)217▲ 32 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (4.3) | 0.18% | — | Wpdesk Flexible SubscriptionsAI | 10/12/2026 | 10/13/2026 | Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Subscriptions: from n/a through 1.8.4. | |
| Deferred | Critical (9.8) | 0.56% | — | Flexible SubscriptionsAI | 8/19/2026 | 8/20/2026 | Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions. |