Vulnerabilities
Summary — last 7 days
New vulnerabilities4,740▼ 570 vs. last week
Critical / high1,842▼ 1,227 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)827▲ 715 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.1) | 0.21% | — | Paymentplugins Stripe WoocommerceAI | 10/10/2026 | 10/13/2026 | The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '#response' URL Fragment in all versions up to, and including, 4.0.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary… | |
| Deferred | Medium (6.5) | 0.17% | — | Funnelkit Payment Gateway FOR Stripe WoocommerceAI | 6/26/2026 | 6/29/2026 | Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions. |