PULSE
ES
FEED
ransomscarlettgroup reclama a nbcuniversal.com · US · Technologyransomn0n reclama a Xylanpicks · US · Not Foundransombravox reclama a GSE-M Technology Sdn. Bhd. · MY · Technologyransomemperador reclama a Bruin Group LLC · US · Otherransomsilentransomgroup reclama a M... M... · Not Foundransomsilentransomgroup reclama a P... H... · Not Foundransomglobal secret group reclama a Graves Fireplaces, Inc. · US · Manufacturingransomincransom reclama a centralrogers.com · US · Otherransomdark project reclama a Asensus Surgical · US · Healthcareransomdark project reclama a The Excalibur Group · US · Not Foundransomsilentransomgroup reclama a P...S...R... · Not Foundransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Educationransomscarlettgroup reclama a nbcuniversal.com · US · Technologyransomn0n reclama a Xylanpicks · US · Not Foundransombravox reclama a GSE-M Technology Sdn. Bhd. · MY · Technologyransomemperador reclama a Bruin Group LLC · US · Otherransomsilentransomgroup reclama a M... M... · Not Foundransomsilentransomgroup reclama a P... H... · Not Foundransomglobal secret group reclama a Graves Fireplaces, Inc. · US · Manufacturingransomincransom reclama a centralrogers.com · US · Otherransomdark project reclama a Asensus Surgical · US · Healthcareransomdark project reclama a The Excalibur Group · US · Not Foundransomsilentransomgroup reclama a P...S...R... · Not Foundransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Education
CVE Watch401,106 in full archive

Vulnerabilities exploitable today

16,677in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665

Distribution · last window

  • Critical
    3,504
  • High
    15,974
  • Medium
    14,897
  • Low
    1,475
Filters
Filters

Window

Severity

Flags

Vulnerabilities12,641–12,680 · 16,677
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-972396.5 MED
19.2%
——6Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.21dCVE-2026-972385.5 MED
5.9%
——2Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.21dCVE-2026-972377.1 HIG
7.1%
——2Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.21dCVE-2026-972366.5 MED
10.8%
——3Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.21dCVE-2026-972357.1 HIG
7.1%
——2Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.21dCVE-2026-971977.5 HIG
19.9%
——6Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.21dCVE-2026-970794.3 MED
19.4%
——6Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.21dCVE-2026-970785.3 MED
12.7%
——4Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.21dCVE-2026-970777.1 HIG
9.4%
——3Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.21dCVE-2026-970744.3 MED
14.9%
——4Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.21dCVE-2026-970676.5 MED
7.1%
——2Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.21dCVE-2026-970665.3 MED
13.1%
——4Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.21dCVE-2026-970657.1 HIG
7.1%
——2Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.21dCVE-2026-968388.8 HIG
3.2%
——1Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.21dCVE-2026-968378.8 HIG
44.4%
——13Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.21dCVE-2026-968367.1 HIG
9.4%
——3Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.21dCVE-2026-968356.5 MED
4.9%
——1Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.21dCVE-2026-968346.5 MED
24.6%
——7Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.21dCVE-2026-968337.2 HIG
32.8%
——10Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.21dCVE-2026-968327.2 HIG
29.5%
——9Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.21dCVE-2026-968318.8 HIG
27.7%
——8Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.21dCVE-2026-968307.1 HIG
9.4%
——3Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.21dCVE-2026-968296.5 MED
7.1%
——2Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.21dCVE-2026-968287.6 HIG
19.1%
——6Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.21dCVE-2026-968277.6 HIG
19.1%
——6Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.21dCVE-2026-968254.2 MED
9.2%
——3Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.21dCVE-2026-968246.8 MED
31.7%
——10Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.21dCVE-2026-968237.5 HIG
24.0%
——7Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.21dCVE-2026-968229.3 CRI
20.4%
——6Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.21dCVE-2026-968216.3 MED
15.2%
——5Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.21dCVE-2026-968207.1 HIG
13.8%
——4Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.21dCVE-2026-968197.1 HIG
13.8%
——4Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.21dCVE-2026-968187.5 HIG
14.8%
——4Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.21dCVE-2026-968178.2 HIG
28.9%
——9Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.21dCVE-2026-968167.1 HIG
7.1%
——2Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.21dCVE-2026-968157.2 HIG
23.2%
——7Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.21dCVE-2026-968147.1 HIG
7.1%
——2Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.21dCVE-2026-964505.4 MED
5.0%
——1Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.21dCVE-2026-963527.1 HIG
7.1%
——2Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.21dCVE-2026-963517.1 HIG
7.1%
——2Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.21d