Vulnerabilities
Summary — last 7 days
New vulnerabilities4,673▼ 677 vs. last week
Critical / high1,759▼ 1,286 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)973▲ 874 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.15% | — | Themetrex Kids PlanetAI | 10/10/2026 | 10/13/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2. | |
| Deferred | Critical (9.8) | 0.50% | — | Ancorathem Kids PlanetAI | 5/23/2025 | 6/17/2026 | Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet kidsplanet allows Object Injection.This issue affects Kids Planet: from n/a through <= 2.2.14. |