Vulnerabilities
Summary — last 7 days
New vulnerabilities3,454▼ 1,360 vs. last week
Critical / high1,321▼ 1,441 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)693▲ 630 vs. last week
More filters
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.8) | 0.29% | — | Wpmanageninja Fluent CRMAI | 10/15/2026 | 10/16/2026 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5. | |
| Deferred | Critical (9.8) | 0.27% | — | Wpmanageninja Fluent CRMAI | 10/15/2026 | 10/15/2026 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5. | |
| Deferred | High (7.6) | 0.38% | — | Fluentcrm Fluent CRM PROAI | 8/24/2026 | 10/12/2026 | Author SQL Injection in FluentCRM Pro <= 3.1.12 versions. | |
| Deferred | High (7.1) | 0.25% | — | Wpmanaginnja Fluent CRMAI | 7/13/2026 | 7/13/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Fluent CRM fluent-crm allows Reflected XSS.This issue affects Fluent CRM: from n/a through <= 3.1.7. | |
| Deferred | Medium (5.4) | 0.83% | Exploit | Fluentcrm Fluent-crmAI | 5/22/2026 | 7/23/2026 | The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.9.87 via the 'SubscribeURL' parameter. This makes it possible for unauthenticated attackers to… |