Aggregating NVD, CVE, and multi-source threat feeds, this list provides deep analysis of high-risk threats such as RCE. By integrating CVSS and EPSS models, the system dynamically tracks Exp (Exploit) resources and PoC availability to accurately assess Exploitability. Combined with official Patches and remediation strategies, it helps prioritize Vulnerability Management workflows, significantly shortening response cycles and securing your critical assets.
Assigner (CNA / source)：[email protected] Remove this filter
| CVE | Description | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|
| CVE-2026-57766 | Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions. | 8.8 | 0.14% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57765 | Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. | 8.5 | 0.22% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57759 | Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions. | 8.8 | 0.14% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57756 | Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. | 8.5 | 0.22% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57752 | Contributor SQL Injection in iNET Webkit 1.2.4 versions. | 8.5 | 0.29% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57751 | Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions. | 8.1 | 0.14% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57688 | Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions. | 8.2 | 0.24% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57687 | Contributor SQL Injection in Custom Field Template <= 2.7.8 versions. | 8.5 | 0.22% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57683 | Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions. | 9.3 | 0.25% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57679 | Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions. | 9.3 | 0.25% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57677 | Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions. | 9.8 | 0.34% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57625 | Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions. | 9.6 | 0.27% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57624 | Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions. | 10.0 | 0.70% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57623 | Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions. | 9.0 | 0.33% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57621 | Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions. | 9.8 | 0.34% | 2026-07-02 | 2026-07-02 |
| CVE-2026-56037 | Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3. | 8.8 | 0.31% | 2026-07-02 | 2026-07-02 |
| CVE-2026-42382 | Unauthenticated Local File Inclusion in Audrey <= 1.5 versions. | 8.1 | 0.30% | 2026-07-02 | 2026-07-02 |
| CVE-2026-27436 | Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions. | 9.1 | 0.40% | 2026-07-02 | 2026-07-02 |
| CVE-2026-27419 | Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions. | 9.9 | 0.36% | 2026-07-02 | 2026-07-02 |
| CVE-2026-27414 | Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions. | 8.8 | 0.29% | 2026-07-02 | 2026-07-02 |