PULSE
LIVE28signals / 24h
FEED
ransomthegentlemen reclama a Advanced Marketing · MX · Professional Servicesransomdeadlock reclama a Schaad, Balass, Menzl and Partner AG · CH · Professional Servicesransomdeadlock reclama a HİDROMEK · TR · Manufacturingransomdeadlock reclama a KEMEK · Manufacturingransomdeadlock reclama a KeNHA · KE · Government & Defenseransomdeadlock reclama a BioResearch · PL · Healthcareransomdeadlock reclama a Relesa · AR · Otherransomdeadlock reclama a Carrier AB · SE · Manufacturingransomdeadlock reclama a Enedo Power · FI · Energy & Utilitiesransomdeadlock reclama a CNA · IT · Financial Servicesransomdeadlock reclama a Vinilon · CL · Manufacturingransomkairos reclama a Thermalex Inc · US · Manufacturingransomblackwater reclama a msgas.com.br · BR · Energy & Utilitiesransombravox reclama a A&A Safety · US · Otherransomthegentlemen reclama a Advanced Marketing · MX · Professional Servicesransomdeadlock reclama a Schaad, Balass, Menzl and Partner AG · CH · Professional Servicesransomdeadlock reclama a HİDROMEK · TR · Manufacturingransomdeadlock reclama a KEMEK · Manufacturingransomdeadlock reclama a KeNHA · KE · Government & Defenseransomdeadlock reclama a BioResearch · PL · Healthcareransomdeadlock reclama a Relesa · AR · Otherransomdeadlock reclama a Carrier AB · SE · Manufacturingransomdeadlock reclama a Enedo Power · FI · Energy & Utilitiesransomdeadlock reclama a CNA · IT · Financial Servicesransomdeadlock reclama a Vinilon · CL · Manufacturingransomkairos reclama a Thermalex Inc · US · Manufacturingransomblackwater reclama a msgas.com.br · BR · Energy & Utilitiesransombravox reclama a A&A Safety · US · Other
CVE Watch352,773 in full archive

Vulnerabilities exploitable today

352,773in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,653
New KEV · 24H0
Exploit Today ≥ 701,598

Distribution · last window

  • Critical
    2,281
  • High
    7,876
  • Medium
    7,168
  • Low
    676
Filters

Window

Severity

Flags

Vulnerabilities11,001–11,040 · 352,773
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-16516
97.0%
29
CVE-2019-12735
97.0%
29
CVE-2018-15139
97.0%
29
CVE-2026-87329.8 CRI
97.0%
29The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmp_temp_access_ajax AJAX action being registered with wp_ajax_nopriv_ and protected only by a nonce check using the fc-call-nonce nonce, which is publicly embedded into every frontend page via wp_localize_script as the nonce field of the wpgmp_local JavaScript object, rendering the check ineffective as an access control mechanism. This makes it possible for unauthenticated attackers to invoke the wpgmp_temp_access_support handler with check_temp=false, which unconditionally creates a new WordPress user with the hardcoded role of administrator via wp_insert_user() and returns a magic login URL that, when visited, calls wp_set_auth_cookie() to fully authenticate the attacker as the newly created administrator, resulting in complete site takeover.4d
CVE-2016-7229
97.0%
29
CVE-2010-1657
97.0%
29
CVE-2024-32461
97.0%
29
CVE-2018-0967
97.0%
29
CVE-2020-10567
97.0%
29
CVE-2005-3758
97.0%
29
CVE-2021-3064
97.0%
29
CVE-2013-0653
97.0%
29
CVE-2005-3525
97.0%
29
CVE-2019-0196
97.0%
29
CVE-2017-11153
97.0%
29
CVE-2018-8262
97.0%
29
CVE-2007-3930
97.0%
29
CVE-2018-8274
97.0%
29
CVE-2021-21135
97.0%
29
CVE-2010-1353
97.0%
29
CVE-2018-5972
97.0%
29
CVE-2018-5988
97.0%
29
CVE-2016-0954
97.0%
29
CVE-2013-1336
97.0%
29
CVE-2018-8275
97.0%
29
CVE-2018-8290
97.0%
29
CVE-2018-8280
97.0%
29
CVE-2015-5370
97.0%
29
CVE-2018-8286
97.0%
29
CVE-2025-68472
97.0%
29
CVE-2024-2878
97.0%
29
CVE-2019-1221
97.0%
29
CVE-2021-23394
97.0%
29
CVE-2018-1027
97.0%
29
CVE-2025-67779
97.0%
29
CVE-2015-0042
97.0%
29
CVE-2017-14627
97.0%
29
CVE-2015-5262
97.0%
29
CVE-2014-9371
97.0%
29
CVE-2018-8460
97.0%
29