Vulnerabilities
Summary — last 7 days
New vulnerabilities2,674▼ 561 vs. last week
Critical / high1,270▼ 252 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)217▼ 222 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.5) | 0.31% | — | Woocommerce LotteryAI | 10/6/2026 | 10/6/2026 | Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions. | |
| Deferred | High (7.5) | 0.32% | — | Woocommerce LotteryAI | 8/26/2026 | 8/26/2026 | The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible… |