Vulnerabilities
Summary — last 7 days
New vulnerabilities4,613▼ 762 vs. last week
Critical / high1,815▼ 1,289 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)745▲ 647 vs. last week
More filters
8 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (4.3) | 0.23% | — | Honzat Page Manager FOR ElementorAI | 9/26/2025 | 10/9/2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Page Manager for Elementor: from n/a through <= 2.0.5. | |
| Deferred | High (7.6) | 0.26% | — | Honzat Page Manager FOR ElementorAI | 8/28/2025 | 10/18/2026 | Missing Authorization vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Manager for Elementor: from n/a through <= 2.0.5. | |
| Modified | Critical (9.8) | 0.59% | — | Remyandrade Testimonial Page Manager | 2/2/2024 | 6/17/2026 | A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql injection. The attack may be… | |
| Modified | Medium (6.1) | 0.48% | — | Remyandrade Testimonial Page Manager | 2/2/2024 | 6/17/2026 | A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site scripting. The attack… | |
| Modified | High (8.8) | 0.24% | — | Elisebosse Frontpage Manager | 1/31/2024 | 6/17/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Elise Bosse Frontpage Manager.This issue affects Frontpage Manager: from n/a through 1.3. | |
| Modified | High (8.8) | 0.56% | — | Swifty Page Manager Project Swifty Page Manager | 1/5/2023 | 6/17/2026 | The Swifty Page Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on several AJAX actions handling page creation and deletion among other things. This makes it possible for unauthenticated attackers to… | |
| Modified | Medium (4.8) | 0.66% | — | Swifty Page Manager Project Swifty Page Manager | 1/5/2023 | 6/17/2026 | The Swifty Page Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘spm_plugin_options_page_tree_max_width’ parameter in versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with… | |
| Modified | High (7.5) | 4.2% | Exploit | Sami Ekblad Page Manager | 9/8/2009 | 6/16/2026 | Unrestricted file upload vulnerability in upload.php in Page Manager 2006-02-04 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. |