Recent vulnerabilities
Recent vulnerabilities from
Select from 70 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25608 |
2.3 (4.0)
|
Lack of traffic encryption in STER |
Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy |
STER |
2026-05-22T09:14:51.066Z | 2026-05-22T10:59:55.665Z |
| CVE-2026-25607 |
5.7 (4.0)
|
Weak password encoding in STER |
Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy |
STER |
2026-05-22T09:14:47.530Z | 2026-05-22T09:14:47.530Z |
| CVE-2026-25606 |
8.7 (4.0)
|
SQL Injection in STER |
Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy |
STER |
2026-05-22T09:14:40.513Z | 2026-05-22T09:14:40.513Z |
| CVE-2026-9011 |
7.5 (3.1)
|
Ditty <= 3.1.65 - Missing Authorization to Unauthentic… |
metaphorcreations |
Ditty – Responsive News Tickers, Sliders, and Lists |
2026-05-22T07:50:25.552Z | 2026-05-22T07:50:25.552Z |
| CVE-2026-8692 |
4.3 (3.1)
|
Vedrixa Forms <= 1.1.1 - Missing Authorization to Auth… |
registrationformbuilder |
Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder |
2026-05-22T07:50:24.457Z | 2026-05-22T07:50:24.457Z |
| CVE-2026-8684 |
5.3 (3.1)
|
MotoPress Hotel Booking <= 6.0.1 - Missing Authorizati… |
jetmonsters |
MotoPress Hotel Booking |
2026-05-22T07:50:26.756Z | 2026-05-22T07:50:26.756Z |
| CVE-2026-8679 |
7.5 (3.1)
|
AudioIgniter Music Player <= 2.0.2 - Unauthenticated I… |
cssigniterteam |
AudioIgniter Music Player |
2026-05-22T07:50:27.202Z | 2026-05-22T10:20:11.498Z |
| CVE-2026-8381 |
5.4 (3.1)
|
Broken Access Control in TeamViewer DEX Platform (On P… |
TeamViewer |
DEX (On-premises) |
2026-05-22T08:29:16.451Z | 2026-05-22T08:29:16.451Z |
| CVE-2026-7798 |
5.4 (3.1)
|
FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Sid… |
techjewel |
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution |
2026-05-22T07:50:26.354Z | 2026-05-22T07:50:26.354Z |
| CVE-2026-7636 |
4.3 (3.1)
|
Slider by Soliloquy <= 2.8.1 - Authenticated (Subscrib… |
smub |
Slider by Soliloquy – Responsive Image Slider for WordPress |
2026-05-22T07:50:25.970Z | 2026-05-22T07:50:25.970Z |
| CVE-2026-7615 |
4.3 (3.1)
|
Widget Context <= 1.3.3 - Cross-Site Request Forgery t… |
kasparsd |
Widget Context |
2026-05-22T07:50:25.128Z | 2026-05-22T07:50:25.128Z |
| CVE-2026-5072 |
N/A
|
ptp: Potential Denial of Service via PTP Interval Shift |
zephyrproject-rtos |
Zephyr |
2026-05-22T07:00:36.025Z | 2026-05-22T07:00:36.025Z |
| CVE-2026-9104 |
6.4 (3.1)
|
Draft List <= 2.6.3 - Authenticated (Author+) Stored C… |
dartiss |
Draft List |
2026-05-22T03:39:20.708Z | 2026-05-22T03:39:20.708Z |
| CVE-2026-9018 |
8.8 (3.1)
|
Easy Elements for Elementor – Addons & Website Templat… |
themewant |
Easy Elements for Elementor – Addons & Website Templates |
2026-05-22T04:29:04.565Z | 2026-05-22T04:29:04.565Z |
| CVE-2026-7509 |
6.4 (3.1)
|
KIA Subtitle <= 4.0.1 - [Improper Neutralization of In… |
helgatheviking |
KIA Subtitle |
2026-05-22T03:39:21.812Z | 2026-05-22T10:21:17.426Z |
| CVE-2026-7249 |
4.3 (3.1)
|
Location Weather <= 3.0.2 - Missing Authorization to A… |
shapedplugin |
Location Weather – WordPress Weather Forecast, AQI, Temperature and Weather Widget |
2026-05-22T03:39:22.232Z | 2026-05-22T03:39:22.232Z |
| CVE-2026-6864 |
6.1 (3.1)
|
CBX 5 Star Rating & Review <= 1.0.7 - Reflected Cross-… |
manchumahara |
CBX 5 Star Rating & Review |
2026-05-22T03:39:21.434Z | 2026-05-22T03:39:21.434Z |
| CVE-2026-4070 |
4.3 (3.1)
|
Alfie <= 1.2.1 - Cross-Site Request Forgery to Feed De… |
pftool |
Alfie – Feed Plugin |
2026-05-22T04:29:04.087Z | 2026-05-22T04:29:04.087Z |
| CVE-2026-44409 |
5.7 (3.1)
|
Information disclosure vulnerability in ZTE MU5250 |
ZTE |
MU5250 |
2026-05-22T03:49:56.231Z | 2026-05-22T03:49:56.231Z |
| CVE-2026-3481 |
6.1 (3.1)
|
WP Blockade <= 0.9.14 - Reflected Cross-Site Scripting… |
burlingtonbytes |
WP Blockade – Visual Page Builder |
2026-05-22T04:29:01.158Z | 2026-05-22T04:29:01.158Z |
| CVE-2026-2518 |
4.3 (3.1)
|
FastX <= 1.0.2 - Missing Authorization to Authenticate… |
wpxpo |
FastX |
2026-05-22T04:29:03.590Z | 2026-05-22T04:29:03.590Z |
| CVE-2026-9054 |
9.2 (4.0)
|
Invalid IP packets cause a kernel panic |
9front |
9front |
2026-05-22T03:21:49.646Z | 2026-05-22T03:24:04.074Z |
| CVE-2026-9053 |
6.9 (4.0)
|
Mothra would respect a default value given by a w… |
9front |
9front |
2026-05-22T02:57:35.162Z | 2026-05-22T02:57:35.162Z |
| CVE-2026-4834 |
7.5 (3.1)
|
WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection vi… |
weDevs |
WP ERP Pro |
2026-05-22T02:28:07.862Z | 2026-05-22T10:21:44.297Z |
| CVE-2026-46598 |
N/A
|
Invoking pathological inputs can lead to client panic… |
golang.org/x/crypto |
golang.org/x/crypto/ssh/agent |
2026-05-22T02:31:27.986Z | 2026-05-22T02:31:27.986Z |
| CVE-2026-46597 |
N/A
|
Invoking byte arithmetic causes underflow and panic i… |
golang.org/x/crypto |
golang.org/x/crypto/ssh |
2026-05-22T02:31:26.754Z | 2026-05-22T02:31:26.754Z |
| CVE-2026-46595 |
N/A
|
Invoking VerifiedPublicKeyCallback permissions skip e… |
golang.org/x/crypto |
golang.org/x/crypto/ssh |
2026-05-22T02:31:27.894Z | 2026-05-22T02:31:27.894Z |
| CVE-2026-42508 |
N/A
|
Invoking auth bypass via unenforced @revoked status i… |
golang.org/x/crypto |
golang.org/x/crypto/ssh/knownhosts |
2026-05-22T02:31:27.644Z | 2026-05-22T02:31:27.644Z |
| CVE-2026-39835 |
N/A
|
Invoking server panic during CheckHostKey/Authenticat… |
golang.org/x/crypto |
golang.org/x/crypto/ssh |
2026-05-22T02:31:26.982Z | 2026-05-22T02:31:26.982Z |
| CVE-2026-39834 |
N/A
|
Invoking infinite loop on large channel writes in gol… |
golang.org/x/crypto |
golang.org/x/crypto/ssh |
2026-05-22T02:31:27.540Z | 2026-05-22T02:31:27.540Z |