The archive.

prodigycommerce1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-0926 · prodigycommerce Prodigy Commerce

Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]

EPSS 9%CVSS 9.8

microsoft1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2026-26030 · microsoft semantic-kernel

Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

EPSS 4%CVSS 10.0

NesterSoft Inc.1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-15559 · NesterSoft Inc. WorkTime (on-prem/cloud)

Unauthenticated OS Command Injection in NesterSoft WorkTime

EPSS 0.5%public exploit CVSS 9.8

SPIP2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-71243 · SPIP Saisies pour formulaire

SPIP Saisies Plugin < 5.11.1 Remote Code Execution

EPSS 6%CVSS 9.8

CVE-2026-27475 · SPIP SPIP

SPIP < 4.4.9 Insecure Deserialization

EPSS 0.9%CVSS 9.2

TryGhost1 vulnerability on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2026-26980 · TryGhost Ghost

Ghost has a SQL Injection in its Content API

EPSS 71%CVSS 9.4

franchidesign1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-1405 · franchidesign Slider Future

Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

EPSS 3%CVSS 9.8

librenms1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-26988 · librenms librenms

LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

EPSS 8%CVSS 9.3

tassos.gr1 vulnerability on this pageMax CVSS 9.5Priority 44KEV 0

CVE-2026-21627 · tassos.gr Novarain/Tassos Framework (plg_system_nrframework)

Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

EPSS 2%CVSS 9.5

Acronis4 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-30411 · Acronis Acronis Cyber Protect 16

Sensitive data disclosure and manipulation due to improper authentication.

EPSS 0.8%CVSS 10.0

CVE-2025-30412 · Acronis Acronis Cyber Protect 16

Sensitive data disclosure and manipulation due to improper authentication.

EPSS 0.7%CVSS 10.0

CVE-2025-30410 · Acronis Acronis Cyber Protect Cloud Agent

Sensitive data disclosure and manipulation due to missing authentication.

EPSS 0.7%CVSS 9.8

CVE-2025-30416 · Acronis Acronis Cyber Protect 16

Sensitive data disclosure and manipulation due to missing authorization.

EPSS 0.5%CVSS 10.0

kata-containers1 vulnerability on this pageMax CVSS 9.4Priority 41KEV 0

CVE-2026-24834 · kata-containers kata-containers

Kata Container to Guest micro VM privilege escalation

EPSS 0.2%public exploit CVSS 9.4

parallax2 vulnerabilities on this pageMax CVSS 9.6Priority 41KEV 0

CVE-2026-25755 · parallax jsPDF

jsPDF has PDF Object Injection via Unsanitized Input in addJS Method

EPSS 1.0%CVSS 9.6

CVE-2026-25940 · parallax jsPDF

jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)

EPSS 0.5%CVSS 9.6

DynamicWeb1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-2731 · DynamicWeb DynamicWeb 9

Unauthenticated RCE in Dynamicweb 9 and Dynamicweb 8

EPSS 0.6%CVSS 10.0

Hyland2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-26339 · Hyland Alfresco Transformation Service (Enterprise)

Hyland Alfresco Transformation Service Argument Injection RCE

CVE-2026-26338 · Hyland Alfresco Transformation Service (Enterprise)

Hyland Alfresco Transformation Service SSRF

kovidgoyal2 vulnerabilities on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-26064 · kovidgoyal calibre

calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution

EPSS 1.0%CVSS 9.3

CVE-2026-26065 · kovidgoyal calibre

calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution

EPSS 0.6%CVSS 9.3

Inrove Software and Internet Services1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-8350 · Inrove Software and Internet Services BiEticaret CMS

Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS

LoftOcean1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-67995 · LoftOcean PatioTime

WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability

OpenGamePanel1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-15586 · OpenGamePanel OGP-Website

OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited ca…

EPSS 0.5%CVSS 10.0

Tygo-van-den-Hurk1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-26974 · Tygo-van-den-Hurk Slyde

Sylde has Improper Control of Generation of Code

WSO21 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2025-13590 · WSO2 WSO2 API Manager

Authenticated arbitrary file upload via a System REST API requiring administrator permission.

EPSS 0.8%CVSS 9.1

openclaw1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-27002 · openclaw openclaw

OpenClaw: Docker container escape via unvalidated bind mount config injection

SmartDataSoft1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-12882 · SmartDataSoft Clasifico Listing

Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation

zozothemes1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-68549 · zozothemes Wiguard

WordPress Wiguard theme < 2.0.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

BoldThemes3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-67996 · BoldThemes Nestin

WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability

CVE-2025-67997 · BoldThemes Travelicious

WordPress Travelicious theme < 1.6.7 - PHP Object Injection vulnerability

CVE-2025-68541 · BoldThemes Ippsum

WordPress Ippsum theme <= 1.2.0 - PHP Object Injection vulnerability

BuddhaThemes1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-13563 · BuddhaThemes Lizza LMS Pro

Lizza LMS Pro <= 1.0.3 - Unauthenticated Privilege Escalation

clavaque1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-1994 · clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover

magepeopleteam1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-23549 · magepeopleteam WpEvently

WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability

ThemeGoods1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-23542 · ThemeGoods Grand Restaurant

WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability

WesternDeal1 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2025-67979 · WesternDeal WPForms Google Sheet Connector

WordPress WPForms Google Sheet Connector plugin <= 4.0.1 - Remote Code Execution (RCE) vulnerability

EPSS 0.4%CVSS 9.9

DATABASE Software Training Consulting Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-9953 · DATABASE Software Training Consulting Ltd. Databank Accreditation Software

SQLi in Database Software's Databank Accreditation Software

Kolay Software Inc.1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-10970 · Kolay Software Inc. Talentics

SQLi in Kolay Software's Talentics

EPSS 0.3%CVSS 9.8

scriptsbundle1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-13851 · scriptsbundle Buyent

Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration