Vulnerabilities
Summary — last 7 days
New vulnerabilities4,547▼ 809 vs. last week
Critical / high1,774▼ 1,316 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)760▲ 661 vs. last week
More filters
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (4.3) | 0.15% | — | Aa-team Wordpress Movies Bulk ImporterAI | 1/22/2026 | 6/17/2026 | Cross-Site Request Forgery (CSRF) vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through <= 1.0. | |
| Modified | Medium (6.1) | 4.0% | Exploit | Movies Project Movies | 12/27/2019 | 6/17/2026 | Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. | |
| Modified | Medium (5.4) | 0.27% | — | Myanmar Movies HD Project Myanmar Movies HD | 10/20/2014 | 6/17/2026 | The Myanmar Movies HD (aka com.wmyanmarmoviesHD) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | |
| Modified | High (7.5) | 1.00% | Exploit | Allomani Movies Library | 3/18/2010 | 6/16/2026 | SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action. | |
| Modified | High (7.5) | 1.00% | Exploit | Joomitaly Jmovies | 12/16/2008 | 6/16/2026 | SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. |