Vulnerabilities
Summary — last 7 days
New vulnerabilities5,349▲ 1,791 vs. last week
Critical / high2,679▲ 959 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)755▲ 546 vs. last week
7 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.4) | 0.31% | — | Recently Purchased Products FOR WOOAI | 3/5/2025 | 6/17/2026 | The Recently Purchased Products For Woo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘view’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access… | |
| Deferred | High (7.1) | 0.33% | — | Deepintowp WC Recently Viewed ProductsAI | 12/2/2024 | 6/17/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in deepintowp Wc Recently viewed products wc-recently-viewed-products allows Reflected XSS.This issue affects Wc Recently viewed products: from n/a through <= 1.0.1. | |
| Deferred | Critical (9.8) | 0.52% | — | AL Imran Akash Recently-viewed-most-viewed-and-sold-products-for-woocommerceAI | 10/16/2024 | 6/17/2026 | Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently recently-viewed-most-viewed-and-sold-products-for-woocommerce allows Object Injection.This issue affects Recently: from n/a through <= 1.1. | |
| Modified | Critical (9.8) | 0.65% | — | G5plus ERE Recently Viewed | 2/12/2024 | 6/17/2026 | Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3. | |
| Modified | Critical (9.8) | 0.77% | — | Rajarora795 Recently Viewed Products | 12/19/2023 | 6/17/2026 | Deserialization of Untrusted Data vulnerability in Rajnish Arora Recently Viewed Products.This issue affects Recently Viewed Products: from n/a through 1.0.0. | |
| Modified | Medium (4.8) | 0.42% | — | Cedcommerce Recently Viewed AND Most Viewed Products | 11/14/2023 | 6/17/2026 | Auth. (Shop Manager+) Stored Cross-Site Scripting (XSS) vulnerability in CedCommerce Recently viewed and most viewed products plugin <= 1.1.1 versions. | |
| Modified | High (8.8) | 1.6% | — | Recently Project Recently | 6/7/2023 | 6/17/2026 | The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server which may make remote… |