Vulnerabilidades exploráveis hoje
413,525na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,739
- Alta22,705
- Média21,204
- Baixa2,175
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2005-0233—97.5%
——29——CVE-2022-27336—97.5%
——29——CVE-2017-3044—97.5%
——29——CVE-2008-0237—97.5%
——29——CVE-2014-2765—97.5%
——29——CVE-2024-39226—97.5%
——29——CVE-2009-2528—97.5%
——29——CVE-1999-0681—97.5%
——29——CVE-2012-2983—97.5%
——29——CVE-2010-3216—97.5%
——29——CVE-2014-2767—97.5%
——29——CVE-2021-27154—97.5%
——29——CVE-2014-2771—97.5%
——29——CVE-2015-2542—97.5%
——29——CVE-2016-4179—97.5%
——29——CVE-2026-87329.8 CRÍ97.5%
——29The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmp_temp_access_ajax AJAX action being registered with wp_ajax_nopriv_ and protected only by a nonce check using the fc-call-nonce nonce, which is publicly embedded into every frontend page via wp_localize_script as the nonce field of the wpgmp_local JavaScript object, rendering the check ineffective as an access control mechanism. This makes it possible for unauthenticated attackers to invoke the wpgmp_temp_access_support handler with check_temp=false, which unconditionally creates a new WordPress user with the hardcoded role of administrator via wp_insert_user() and returns a magic login URL that, when visited, calls wp_set_auth_cookie() to fully authenticate the attacker as the newly created administrator, resulting in complete site takeover.114dCVE-2024-42448—97.5%
——29——CVE-2014-9734—97.5%
——29——CVE-2017-8461—97.5%
——29——CVE-2022-24934—97.5%
——29——CVE-2016-3717—97.5%
——29——CVE-2014-2766—97.5%
——29——CVE-2014-2763—97.5%
——29——CVE-2017-8463—97.5%
——29——CVE-2008-3842—97.5%
——29——CVE-2014-2759—97.5%
——29——CVE-2021-27146—97.5%
——29——CVE-2018-0791—97.5%
——29——CVE-2008-2949—97.5%
——29——CVE-2014-2760—97.5%
——29——CVE-2016-2007—97.5%
——29——CVE-2016-2006—97.5%
——29——CVE-2013-1303—97.5%
——29——CVE-2018-8502—97.5%
——29——CVE-2006-3656—97.5%
——29——CVE-2014-1802—97.5%
——29——CVE-2002-2031—97.5%
——29——CVE-2014-2768—97.5%
——29——CVE-2007-0168—97.5%
——29——CVE-2005-2088—97.5%
——29——