Vulnerabilities
Summary — last 7 days
New vulnerabilities5,169▲ 2,076 vs. last week
Critical / high2,875▲ 1,375 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)184▼ 23 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.18% | — | Themehunk TH Shop ManiaAI | 10/9/2026 | 10/9/2026 | Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Th Shop Mania: from n/a through 1.9.1. | |
| Deferred | High (8.8) | 1.7% | 💥 PoC | TH Shop ManiaAI | 11/9/2024 | 6/17/2026 | The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_install_and_activate_callback() function in all versions up to, and including, 1.4.9. This makes it possible for authenticated attackers, with Subscriber-level access… |