Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-13945 CVE-2020-13945 HIGH N/A 72.98% cvelistv5
cve-2026-94238 The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will ... MEDIUM 6.8 0.32% cvelistv5 2026-10-06
cve-2026-92975 The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalat... HIGH 8.1 0.34% cvelistv5 2026-10-13
cve-2026-82187 Unrestricted Upload of File with Dangerous Type CRITICAL 9.8 0.55% cvelistv5 2026-10-26
cve-2026-81543 Improper Privilege Management HIGH 8.8 0.44% cvelistv5 2026-10-26
cve-2026-66592 CVE-2026-66592 CRITICAL 9.3 0.40% cvelistv5
cve-2026-54675 FreePBX is an open source IP PBX HIGH 8.7 0.66% cvelistv5 2026-10-16
cve-2026-28177 CVE-2026-28177 HIGH 7.1 0.25% cvelistv5
cve-2026-16482 Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 0.58% cvelistv5 2026-10-26
cve-2026-11565 advancedfilemanager advanced_file_manager Missing Authorization HIGH 8.5 1.25% cvelistv5 2026-10-26
cve-2026-111497 Google Brotli Unchecked Return Value Vulnerability CRITICAL 9.2 82.64% cvelistv5 2026-10-27
cve-2026-103366 Authorization Bypass Through User-Controlled Key HIGH 7.5 0.47% cvelistv5 2026-10-26
cve-2025-26986 Improper Control of Filename for Include/Require Statement in PHP Program HIGH N/A 1.06% cvelistv5 2026-10-26
cve-2025-1232 geminilabs site_reviews Improper Neutralization of Input During Web Page Generation HIGH N/A 1.93% cvelistv5 2026-10-26
cve-2025-11452 asgaros asgaros_forum Improper Neutralization of Special Elements used in an SQL Command HIGH 7.5 1.60% cvelistv5 2026-10-26
cve-2024-33563 8theme Xstore Missing Authorization HIGH 7.6 0.35% cvelistv5 2026-10-26
cve-2023-51411 dynamiapps frontend_admin Unrestricted Upload of File with Dangerous Type CRITICAL 10.0 0.62% cvelistv5 2026-10-26
cve-2022-1471 SUSE CVE CVE-2022-1471 HIGH 8.8 99.50% cvelistv5 2026-09-04
cve-2022-0208 mappresspro mappress Improper Neutralization of Input During Web Page Generation HIGH N/A 2.03% cvelistv5 2026-10-26
cve-2025-57231 Improper Limitation of a Pathname to a Restricted Directory HIGH 7.5 1.73% cvelistv5 2026-10-25
cve-2022-24637 openwebanalytics open_web_analytics Improper Privilege Management HIGH N/A 99.06% cvelistv5 2026-10-25
cve-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 9.3 44.58% cvelistv5 2026-10-27
cve-2024-8517 SPIP SPIP External Control of File Name or Path CRITICAL 9.8 94.53% cvelistv5 2026-10-24
cve-2026-90898 Improper Access Control HIGH N/A 2.31% cvelistv5 2026-10-23
cve-2026-28185 Insufficient Verification of Data Authenticity CRITICAL 9.8 0.27% cvelistv5 2026-10-23
cve-2026-106173 CVE-2026-106173 CRITICAL 9.8 1.00% cvelistv5
cve-2021-23337 CVE-2021-23337 HIGH 7.2 21.33% cvelistv5
cve-2026-97237 CVE-2026-97237 HIGH 7.1 0.18% cvelistv5
cve-2026-87855 Unrestricted Upload of File with Dangerous Type CRITICAL 9.8 0.79% cvelistv5 2026-10-22
cve-2026-85113 GiveWP GiveWP Improper Neutralization of Special Elements in Output Used by a Downstream Component MEDIUM 6.5 0.31% cvelistv5 2026-10-22