Vulnerabilities exploitable today
371,767in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,703
New KEV · 24H0
Exploit Today ≥ 701,643
Distribution · last window
- Critical2,243
- High8,317
- Medium6,349
- Low609
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-0897—22.6%
——7——CVE-2024-42459—22.6%
——7——CVE-2026-53576.4 MED22.6%
——7The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the 'wpdm_members' shortcode in versions up to and including 3.3.52. This is due to insufficient input sanitization and output escaping on the user-supplied 'sid' shortcode attribute. The sid parameter is extracted without sanitization in the members() function and stored via update_post_meta(), then echoed directly into an HTML id attribute in the members.php template without applying esc_attr(). This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page.48dCVE-2026-1841—22.6%
——7——CVE-2026-54556—22.6%
——7Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, an unauthenticated HTTP/2 peer can cause an out-of-memory denial of service in the Ember backend with HTTP/2 enabled. The Hpack wrapper in ember-core/shared/src/main/scala/org/http4s/ember/core/h2/Hpack.scala concatenates HEADERS and CONTINUATION frame fragments and decodes them into a single List, but maxHeaderSize accounting does not include indexed headers or HPACK per-header overhead. A small compressed header block can therefore expand into a much larger decoded representation that remains in memory for processing. Servers exposed to untrusted HTTP/2 traffic and clients directed to an untrusted HTTP/2 server are affected, and concurrent malicious connections can exhaust the process heap. This issue is fixed in versions 0.23.35 and 1.0.0-M47.12dCVE-2026-31281—22.6%
——7——CVE-2023-41520—22.6%
——7——CVE-2026-22485—22.6%
——7——CVE-2025-12342—22.6%
——7——CVE-2026-25204—22.6%
——7——CVE-2026-139115.3 MED22.6%
——7Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)71dCVE-2026-150527.2 HIG22.6%
——7The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all versions up to, and including, 4.3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.29dCVE-2024-1211—22.6%
——7——CVE-2023-45152—22.6%
——7——CVE-2026-6125—22.6%
——7——CVE-2026-144145.3 MED22.6%
——7Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)70dCVE-2026-50560—22.6%
——7——CVE-2021-44903—22.6%
——7——CVE-2024-39509—22.6%
——7——CVE-2026-27738—22.6%
——7——CVE-2004-2713—22.6%
——7——CVE-2023-46407—22.6%
——7——CVE-2025-562197.1 HIG22.6%
——7Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user accounts are created.67dCVE-2025-10529—22.6%
——7——CVE-2026-55619—22.6%
——7——CVE-2024-53976—22.6%
——7——CVE-2025-59376—22.6%
——7——CVE-2024-13379—22.6%
——7——CVE-2005-1578—22.6%
——7——CVE-2026-524756.1 MED22.6%
——7Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file50dCVE-2007-2063—22.6%
——7——CVE-2024-6432—22.6%
——7——CVE-2026-41049.8 CRI22.6%
——7Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass allows SQL Injection.
This issue affects TeknoPass: from 20210501 through 20260429.50dCVE-2005-1286—22.6%
——7——CVE-2025-40807—22.6%
——7——CVE-2026-710588.8 HIG22.6%
——7Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).17dCVE-2026-32099—22.6%
——7——CVE-2025-10168—22.6%
——7——CVE-2024-47386—22.6%
——7——CVE-2026-36186.4 MED22.6%
——7The Columns by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the [print_clmns] shortcode in all versions up to and including 1.0.3. This is due to insufficient input sanitization and output escaping on the 'id' attribute. The shortcode receives the 'id' parameter via shortcode_atts() at line 596 and directly embeds it into HTML output at line 731 (in a div id attribute) and into inline CSS at lines 672-729 without any escaping or sanitization. While the SQL query uses %d to cast the value to an integer for database lookup, the original unsanitized string value of $id is still used in the HTML/CSS output. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The attack requires that at least one column exists in the plugin (created by an admin), as the SQL query must return results for the output branch to be reached.48d