NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2026-56068 | Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions. | 9.3 | 0.24% | 2026-06-26 | 2026-06-29 |
| CVE-2026-56067 | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. | 9.3 | 0.24% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56064 | Subscriber SQL Injection in Tourfic <= 2.22.5 versions. | 8.5 | 0.28% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56063 | Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. | 8.3 | 0.18% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56062 | Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions. | 9.3 | 0.24% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56059 | Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions. | 9.9 | 0.36% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56058 | Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions. | 9.9 | 0.36% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56057 | Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. | 9.8 | 0.43% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56055 | Subscriber PHP Object Injection in RealHomes <= 4.5.3 versions. | 8.8 | 0.39% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56038 | Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions. | 8.8 | 0.23% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56036 | Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions. | 9.3 | 0.24% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56035 | Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions. | 8.6 | 0.27% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56034 | Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions. | 9.3 | 0.29% | 2026-06-26 | 2026-06-29 |
| CVE-2026-56033 | Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions. | 9.8 | 0.33% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56032 | Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions. | 9.8 | 0.53% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56031 | Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. | 8.1 | 0.32% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56030 | Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions. | 9.8 | 0.33% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56028 | Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Templates <= 1.4.9 versions. | 9.8 | 0.36% | 2026-06-26 | 2026-06-29 |
| CVE-2026-56027 | Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions. | 9.9 | 0.33% | 2026-06-26 | 2026-06-26 |
| CVE-2026-56010 | Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. | 8.8 | 0.38% | 2026-06-26 | 2026-06-26 |