Vulnerabilities

Summary — last 7 days

New vulnerabilities2,636▼ 272 vs. last week
Critical / high1,349▲ 92 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)58▼ 469 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.1)4.6%—Midicart PHPMidicart PHP MaxiMidicart PHP Plus12/31/20026/16/2026
MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php.