Vulnerabilities
Summary — last 7 days
New vulnerabilities4,965▲ 164 vs. last week
Critical / high2,071▼ 686 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)804▲ 741 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Critical (9.2) | — | — | Issuu PanelAI | 10/20/2026 | 10/20/2026 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to… | |
| Deferred | High (7.1) | 0.13% | — | Operationsissuu Issuu PanelAI | 1/31/2025 | 6/17/2026 | Cross-Site Request Forgery (CSRF) vulnerability in operationsissuu Issuu Panel issuu-panel allows Stored XSS.This issue affects Issuu Panel: from n/a through <= 2.1.1. |