Vulnerabilities
Summary — last 7 days
New vulnerabilities4,679▼ 662 vs. last week
Critical / high1,855▼ 1,189 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.18% | — | Drfuri MartfuryAI | 10/10/2026 | 10/13/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9. | |
| Deferred | Medium (4.3) | 0.25% | — | MartfuryAI | 7/2/2026 | 7/2/2026 | Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions. | |
| Deferred | Medium (5.1) | 0.31% | — | Botble TranspAIBotble AthenaAIBotble MartfuryAIBotble HomzenAI | 1/20/2026 | 6/17/2026 | HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter. |