Vulnerabilities
Summary — last 7 days
New vulnerabilities3,518▲ 839 vs. last week
Critical / high1,665▲ 254 vs. last week
New active exploitation (KEV)5→ no change vs. last week
Unscored (no CVSS)256▲ 244 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (4.4) | 0.24% | — | TwinklesmtpAI | 1/7/2026 | 10/7/2026 | The twinklesmtp – Email Service Provider For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's sender settings in all versions up to, and including, 1.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with… |