· Vulnerability feed · live

CVE feed

Aggregated from NVD and the CISA Known Exploited Vulnerabilities catalog, updated every 30 minutes. Scores use CVSS v3.1 where published.

Top vendors, last 30 days

1,426 published, 19 exploited
VendorOct 2Oct 4Oct 11Oct 18Oct 25Total
Google238331680
Microsoft667477
Oracle6666
ThemeREX3652566
HPE183250
IBM28103647
Apache91123144
TOTOLINK333440
Adobe26935
Cisco1615123
Wavlink511218
Filters
Severity
Status
Vendor
1,426 results last 30 daysSort:NewestExploited firstLikely exploitedCVSS
9.8Uncanny Toolkit for LearnDash plugin for WordPress — Authentication Bypass.EPSS 0.5%9.8wedevs Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker — The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time…EPSS 0.6%9.1Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress — authorization bypass.EPSS 0.4%9.1WP Booking System - Booking Calendar plugin for WordPress — unauthorized modification of data.EPSS 0.3%9.8PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress — PHP Object Injection.EPSS 0.5%9.3pow-auth assent — authentication bypass.EPSS 0.2%9.8fctr-id okta-ai-agent — missing authentication.EPSS 0.4%9.1mqttsnet thinglinks — SQL injection.EPSS 0.5%9.9mqttsnet thinglinks — command injection.EPSS 0.4%9.6gojue moling — missing authentication.EPSS 0.3%9.1deadtrickster ssl_verify_fun — Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster…EPSS 0.2%9.8Thalesgroup Sentinel Keys Server — remote code execution.EPSS 0.6%9.3akuity kargo — privilege escalation.EPSS 0.4%9.1madeofpendletonwool PinePods — server-side request forgery.EPSS 0.3%9.8seancorfield honeysql — SQL injection.EPSS 0.4%9.9pgadmin.org pgAdmin 4 — command injection.EPSS 0.3%9.8LeadSnap — unsafe deserialization.EPSS 0.3%9.3Ivijan-Stefan Stipic Transliterator — SQL injection.EPSS 0.3%9.8FunnelKit Automations — unsafe deserialization.EPSS 0.4%9.8ThemeREX Royal Event — unsafe deserialization.EPSS 0.4%9.1Marketing Fire Widget Options — remote code execution.EPSS 0.6%9.8Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications — privilege escalation.EPSS 0.3%9.0JetBrains Toolbox App — improper certificate validation.EPSS 0.3%10.0morpheus65535 bazarr — server-side request forgery.EPSS 0.3%10.0Canonical LXD — improper certificate validation.EPSS 0.3%