Vulnerabilities
Summary — last 7 days
New vulnerabilities5,468▲ 2,677 vs. last week
Critical / high3,051▲ 1,725 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)168▼ 38 vs. last week
7 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.1) | 0.17% | — | Soliloquy LiteAI | 6/4/2026 | 7/22/2026 | WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting script tags in the post title field. Attackers can submit POST requests to the post editing endpoint with script payloads in the post_title parameter,… | |
| Deferred | Medium (4.3) | 0.42% | — | Slider BY SoliloquyAI | 5/22/2026 | 7/23/2026 | The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the map_meta_cap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract draft slider… | |
| Deferred | Medium (5.1) | 0.24% | — | Soliloquy SliderAI | 5/10/2026 | 7/25/2026 | Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of users viewing the… | |
| Deferred | Medium (5.9) | 0.30% | — | Slider BY SoliloquyAI | 8/12/2024 | 6/17/2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Authentication vulnerability in Soliloquy Team Slider by Soliloquy allows Cross-Site Scripting (XSS).This issue affects Slider by Soliloquy: from n/a through 2.7.6. | |
| Modified | Medium (4.3) | 0.37% | — | Soliloquywp Slider | 6/11/2024 | 6/17/2026 | Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2. | |
| Modified | Medium (4.3) | 1.0% | — | Lilo Project LiloDebian Linux | 11/26/2019 | 6/16/2026 | lilo-uuid-diskid causes lilo.conf to be world-readable in lilo 23.1. | |
| Modified | Low (2.1) | 0.41% | — | Lilo | 9/3/2008 | 6/16/2026 | LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. |