NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2026-27404 | Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69154 | Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Theme <= 6.7 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69153 | Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69094 | Subscriber SQL Injection in Unicamp <= 2.2.2 versions. | 8.5 | 0.28% | 2026-07-02 | 2026-07-02 |
| CVE-2025-66076 | Unauthenticated Broken Access Control in Woostify Sites Library <= 1.6.2 versions. | 5.3 | 0.21% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57763 | Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. | 6.5 | 0.14% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57762 | Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. | 5.9 | 0.15% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57760 | Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29. | 5.3 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57756 | Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. | 8.5 | 0.22% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57755 | Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions. | 6.5 | 0.14% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57750 | Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions. | 5.3 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57749 | Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions. | 7.5 | 0.28% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57730 | Subscriber Broken Access Control in Flatsome <= 3.20.5 versions. | 4.3 | 0.22% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57690 | Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions. | 4.3 | 0.10% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57685 | Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions. | 4.3 | 0.25% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57684 | Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions. | 6.5 | 0.17% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57679 | Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions. | 9.3 | 0.25% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57678 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected XSS. This issue affects Slider Revolution: from 7.0.0 through 7.0.16. | 7.1 | 0.15% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57677 | Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions. | 9.8 | 0.34% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57671 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions. | 7.1 | 0.19% | 2026-07-02 | 2026-07-02 |