Vulnerabilities
Summary — last 7 days
New vulnerabilities5,182▲ 2,098 vs. last week
Critical / high2,882▲ 1,386 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (8.5) | 0.13% | — | Cpanel WP ToolkitAI | 10/8/2026 | 10/8/2026 | Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. | |
| Awaiting Analysis | Critical (9.4) | 0.61% | — | WP ToolkitAICpanelAI | 9/23/2026 | 9/24/2026 | Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts. | |
| Deferred | High (8.8) | 0.41% | — | Aapanel WP ToolkitAI | 7/18/2025 | 6/17/2026 | The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within the auto_login() function in versions 1.0 to 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to bypass all role checks and gain full admin… |