The archive.

OneUptime1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-27574 · OneUptime oneuptime

OneUptime: node:vm sandbox escape in probe allows any project member to achieve RCE

EPSS 0.6%public exploit CVSS 10.0

HappySeaFox1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-27168 · HappySeaFox sail

SAIL: Heap-based Buffer Overflow in Sail-codecs-xwd

NaturalIntelligence1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-25896 · NaturalIntelligence fast-xml-parser

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

EPSS 0.5%public exploit CVSS 9.3

nolimits4web1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-27212 · nolimits4web swiper

Swiper has a Prototype Pollution Vulnerability

EPSS 0.5%public exploit CVSS 9.4

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-2912 · code-projects Online Reviewer System

code-projects Online Reviewer System studentresult-view.php sql injection

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-2865 · itsourcecode Agri-Trading Online Shopping System

itsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injection

CVE-2026-2867 · itsourcecode Vehicle Management System

itsourcecode Vehicle Management System billaction.php sql injection

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-2848 · SourceCodester Simple Responsive Tourism Website

SourceCodester Simple Responsive Tourism Website Registration Master.php sql injection

Owl2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-26093 · Owl opds

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds

EPSS 1%CVSS 9.8

CVE-2026-2333 · Owl opds

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds

EPSS 1%CVSS 9.8

MLflow1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-2635 · MLflow MLflow

MLflow Use of Default Password Authentication Bypass Vulnerability

EPSS 1%CVSS 9.8

man-group1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-27194 · man-group dtale

D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

EPSS 0.8%CVSS 9.8

cloud-hypervisor1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-27211 · cloud-hypervisor cloud-hypervisor

Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse

EPSS 0.6%CVSS 10.0

GFI2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-2038 · GFI Archiver

GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability

EPSS 0.7%CVSS 9.8

CVE-2026-2039 · GFI Archiver

GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability

EPSS 0.7%CVSS 9.8

Jinan USR IOT Technology Limited (PUSR)1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-25715 · Jinan USR IOT Technology Limited (PUSR) USR-W610

Jinan USR IOT Technology Limited (PUSR) USR-W610 Weak Password Requirements

EPSS 0.6%CVSS 9.8

akuity1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-27112 · akuity kargo

Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints

EPSS 0.5%CVSS 9.9

AncoraThemes2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-69371 · AncoraThemes KindlyCare

WordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerability

EPSS 0.5%CVSS 9.8

CVE-2025-69372 · AncoraThemes SevenHills

WordPress SevenHills theme <= 1.6.2 - PHP Object Injection vulnerability

EPSS 0.5%CVSS 9.8

Bravis-Themes1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-69403 · Bravis-Themes Bravis Addons

WordPress Bravis Addons plugin <= 1.3.0 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

Jthemes1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-69329 · Jthemes Prestige

WordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability

ThemeGoods2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-69301 · ThemeGoods PhotoMe

WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability

CVE-2025-69370 · ThemeGoods Capella

WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability

ThemeREX2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-69404 · ThemeREX Extreme Store

WordPress Extreme Store theme <= 1.5.10 - PHP Object Injection vulnerability

CVE-2025-69405 · ThemeREX Lorem Ipsum | Books & Media Store

WordPress Lorem Ipsum | Books & Media Store theme <= 1.2.11 - PHP Object Injection vulnerability

themesflat1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-69382 · themesflat Themesflat Elementor

WordPress Themesflat Elementor plugin <= 1.0.1 - PHP Object Injection vulnerability

getsentry1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-27197 · getsentry sentry

Sentry: Improper Authentication on SAML SSO process allows user identity linking

EPSS 0.5%CVSS 9.1

TeconceTheme10 vulnerabilities on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-69295 · TeconceTheme Coven Core

WordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

CVE-2025-69304 · TeconceTheme Allmart

WordPress Allmart plugin <= 1.1 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

CVE-2025-69305 · TeconceTheme Crete Core

WordPress Crete Core plugin <= 1.4.3 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

CVE-2025-69366 · TeconceTheme Emerce Core

WordPress Emerce Core plugin <= 1.8 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

CVE-2025-69306 · TeconceTheme Electio Core

WordPress Electio Core plugin <= 1.4 - SQL Injection vulnerability

CVE-2025-69307 · TeconceTheme Medinik Core

WordPress Medinik Core plugin <= 1.3.6 - SQL Injection vulnerability

CVE-2025-69308 · TeconceTheme Nestbyte Core

WordPress Nestbyte Core plugin <= 1.2 - SQL Injection vulnerability

CVE-2025-69309 · TeconceTheme Saasplate Core

WordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability

CVE-2025-69310 · TeconceTheme Woodly Core

WordPress Woodly Core plugin <= 1.4 - SQL Injection vulnerability

CVE-2025-69365 · TeconceTheme Uroan Core

WordPress Uroan Core plugin <= 1.4.4 - SQL Injection vulnerability

leafcolor1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-22384 · leafcolor Applay - Shortcodes

WordPress Applay - Shortcodes plugin <= 3.7 - PHP Object Injection vulnerability

frappe1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-27471 · frappe erpnext

ERP: Document access through endpoints due to missing validation

EPSS 0.4%CVSS 9.3

mitre1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-61144 · mitre

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

EPSS 0.3%CVSS 9.8

TIMLEGGE1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-2588 · TIMLEGGE Crypt::NaCl::Sodium

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems

EPSS 0.4%CVSS 9.1

don-themes1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-69337 · don-themes Wolmart Core

WordPress Wolmart Core plugin <= 1.9.6 - SQL Injection vulnerability

JonathanWilbur1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-27452 · JonathanWilbur asn1-ts

ASN.1 TypeScript Library: Decoding an INTEGER could leak the underlying ArrayBuffer

EPSS 0.3%CVSS 9.2

Shahjada1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-24956 · Shahjada Download Manager Addons for Elementor

WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability