Vulnerabilities
Summary — last 7 days
New vulnerabilities3,199▲ 619 vs. last week
Critical / high1,507▲ 108 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)236▲ 222 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.3) | 0.18% | — | UPI QR Code Payment GatewayAI | 10/5/2026 | 10/6/2026 | The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment. | |
| Deferred | Medium (5.4) | 0.29% | — | UPI QR Code Payment GatewayAI | 6/25/2026 | 6/25/2026 | Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions. | |
| Deferred | Medium (6.5) | 0.30% | — | Knitpay UPI QR Code Payment Gateway FOR WoocommerceAI | 2/20/2026 | 6/17/2026 | Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through <= 1.5.1. |