{
  "day": "2026-06-27",
  "boundary": "UTC calendar day",
  "published_count": 33,
  "by_severity": {
    "CRITICAL": 1,
    "HIGH": 10,
    "MEDIUM": 22,
    "LOW": 0
  },
  "kev_count": 0,
  "exploit_reference_count": 0,
  "awaiting_enrichment_count": 0,
  "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.",
  "results": [
    {
      "rank": 1,
      "cve_id": "CVE-2026-12415",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00804,
      "epss_percentile": 0.53969,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pravel",
      "product": "Invoice Generator",
      "cwe": "CWE-269",
      "title": "Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12415"
    },
    {
      "rank": 2,
      "cve_id": "CVE-2026-8095",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00602,
      "epss_percentile": 0.46148,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nmedia",
      "product": "Frontend File Manager Plugin",
      "cwe": "CWE-73",
      "title": "Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8095"
    },
    {
      "rank": 3,
      "cve_id": "CVE-2026-13333",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00565,
      "epss_percentile": 0.44361,
      "kev": false,
      "kev_due_at": null,
      "vendor": "trainingbusinesspros",
      "product": "Groundhogg — CRM, Newsletters, and Marketing Automation",
      "cwe": "CWE-89",
      "title": "Groundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13333"
    },
    {
      "rank": 4,
      "cve_id": "CVE-2026-12432",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00561,
      "epss_percentile": 0.44119,
      "kev": false,
      "kev_due_at": null,
      "vendor": "themeisle",
      "product": "Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions",
      "cwe": "CWE-862",
      "title": "Stripe Payment Forms by WP Full Pay <= 8.4.3 - Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12432"
    },
    {
      "rank": 5,
      "cve_id": "CVE-2026-12404",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00488,
      "epss_percentile": 0.39812,
      "kev": false,
      "kev_due_at": null,
      "vendor": "webaways",
      "product": "NEX-Forms – Ultimate Forms Plugin for WordPress",
      "cwe": "CWE-862",
      "title": "NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via CSVExport Class",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12404"
    },
    {
      "rank": 6,
      "cve_id": "CVE-2026-9233",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38747,
      "kev": false,
      "kev_due_at": null,
      "vendor": "expresstech",
      "product": "Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker",
      "cwe": "CWE-862",
      "title": "Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9233"
    },
    {
      "rank": 7,
      "cve_id": "CVE-2026-11987",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00471,
      "epss_percentile": 0.38658,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dokaninc",
      "product": "Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy",
      "cwe": "CWE-639",
      "title": "Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure via 'id' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11987"
    },
    {
      "rank": 8,
      "cve_id": "CVE-2026-13331",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00462,
      "epss_percentile": 0.37991,
      "kev": false,
      "kev_due_at": null,
      "vendor": "trainingbusinesspros",
      "product": "Groundhogg — CRM, Newsletters, and Marketing Automation",
      "cwe": "CWE-89",
      "title": "Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13331"
    },
    {
      "rank": 9,
      "cve_id": "CVE-2026-13295",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00419,
      "epss_percentile": 0.34623,
      "kev": false,
      "kev_due_at": null,
      "vendor": "gpriday",
      "product": "Page Builder by SiteOrigin",
      "cwe": "CWE-79",
      "title": "Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13295"
    },
    {
      "rank": 10,
      "cve_id": "CVE-2026-11356",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00397,
      "epss_percentile": 0.32496,
      "kev": false,
      "kev_due_at": null,
      "vendor": "vinod-dalvi",
      "product": "Ivory Search – WordPress Search Plugin",
      "cwe": "CWE-79",
      "title": "Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11356"
    },
    {
      "rank": 11,
      "cve_id": "CVE-2026-12399",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00397,
      "epss_percentile": 0.32496,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jegstudio",
      "product": "Gutenverse – WordPress Blocks, Page Builder & Site Editor",
      "cwe": "CWE-79",
      "title": "Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12399"
    },
    {
      "rank": 12,
      "cve_id": "CVE-2026-3462",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00389,
      "epss_percentile": 0.31658,
      "kev": false,
      "kev_due_at": null,
      "vendor": "reepaydenmark",
      "product": "Frisbii Pay",
      "cwe": "CWE-862",
      "title": "Frisbii Pay <= 1.8.9 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3462"
    },
    {
      "rank": 13,
      "cve_id": "CVE-2026-11783",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00383,
      "epss_percentile": 0.31046,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dokaninc",
      "product": "Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy",
      "cwe": "CWE-79",
      "title": "Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKU",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11783"
    },
    {
      "rank": 14,
      "cve_id": "CVE-2026-10820",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00378,
      "epss_percentile": 0.30504,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content",
      "cwe": null,
      "title": "ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10820"
    },
    {
      "rank": 15,
      "cve_id": "CVE-2026-11364",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00371,
      "epss_percentile": 0.29758,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dornaweb",
      "product": "Product Specifications for Woocommerce",
      "cwe": "CWE-862",
      "title": "Product Specifications for Woocommerce <= 0.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11364"
    },
    {
      "rank": 16,
      "cve_id": "CVE-2026-13245",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00368,
      "epss_percentile": 0.29455,
      "kev": false,
      "kev_due_at": null,
      "vendor": "maxfoundry",
      "product": "MaxButtons – Create buttons",
      "cwe": "CWE-79",
      "title": "MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13245"
    },
    {
      "rank": 17,
      "cve_id": "CVE-2026-13335",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00357,
      "epss_percentile": 0.28368,
      "kev": false,
      "kev_due_at": null,
      "vendor": "codepeople",
      "product": "CodePeople Post Map for Google Maps",
      "cwe": "CWE-79",
      "title": "CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13335"
    },
    {
      "rank": 18,
      "cve_id": "CVE-2026-9242",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00338,
      "epss_percentile": 0.26287,
      "kev": false,
      "kev_due_at": null,
      "vendor": "metagauss",
      "product": "RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login",
      "cwe": "CWE-345",
      "title": "RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9242"
    },
    {
      "rank": 19,
      "cve_id": "CVE-2026-12471",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00336,
      "epss_percentile": 0.26033,
      "kev": false,
      "kev_due_at": null,
      "vendor": "templatescoderthemes",
      "product": "Spexo",
      "cwe": "CWE-862",
      "title": "Spexo <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12471"
    },
    {
      "rank": 20,
      "cve_id": "CVE-2026-11597",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00331,
      "epss_percentile": 0.25499,
      "kev": false,
      "kev_due_at": null,
      "vendor": "surbma",
      "product": "Surbma | Infusionsoft Shortcode",
      "cwe": "CWE-79",
      "title": "Surbma | Infusionsoft Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11597"
    },
    {
      "rank": 21,
      "cve_id": "CVE-2023-37524",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00273,
      "epss_percentile": 0.19085,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HCLSoftware",
      "product": "Traveler for Microsoft Outlook",
      "cwe": "CWE-1104",
      "title": "HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-37524"
    },
    {
      "rank": 22,
      "cve_id": "CVE-2026-13422",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00261,
      "epss_percentile": 0.17435,
      "kev": false,
      "kev_due_at": null,
      "vendor": "harmonic_design",
      "product": "HD Quiz",
      "cwe": "CWE-352",
      "title": "HD Quiz 2.2.0 - 2.2.1 - Cross-Site Request Forgery via Multiple AJAX Handlers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13422"
    },
    {
      "rank": 23,
      "cve_id": "CVE-2026-11773",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0025,
      "epss_percentile": 0.16124,
      "kev": false,
      "kev_due_at": null,
      "vendor": "masteriyo",
      "product": "Masteriyo LMS – LMS Course Builder, Quizzes & Certificates",
      "cwe": "CWE-862",
      "title": "Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11773"
    },
    {
      "rank": 24,
      "cve_id": "CVE-2026-9677",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00242,
      "epss_percentile": 0.1509,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Shariff for WordPress",
      "cwe": null,
      "title": "Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9677"
    },
    {
      "rank": 25,
      "cve_id": "CVE-2026-10643",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00164,
      "epss_percentile": 0.05729,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zephyrproject",
      "product": "zephyr",
      "cwe": "CWE-787",
      "title": "Out-of-bounds heap write in Zephyr `recvmsg()` ancillary-data path (`insert_pktinfo` undersizes the control-buffer capacity check)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10643"
    },
    {
      "rank": 26,
      "cve_id": "CVE-2026-45258",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00153,
      "epss_percentile": 0.04647,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeBSD",
      "product": "FreeBSD",
      "cwe": "CWE-125",
      "title": "Multiple vulnerabilities in the sound(4) mmap path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45258"
    },
    {
      "rank": 27,
      "cve_id": "CVE-2026-49412",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00153,
      "epss_percentile": 0.04711,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeBSD",
      "product": "FreeBSD",
      "cwe": "CWE-416",
      "title": "Use-after-free bug in the IPV6_MSFILTER socket option handler",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49412"
    },
    {
      "rank": 28,
      "cve_id": "CVE-2026-49414",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00153,
      "epss_percentile": 0.04711,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeBSD",
      "product": "FreeBSD",
      "cwe": "CWE-179",
      "title": "ASLR bypass for setuid executables via procctl(2)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49414"
    },
    {
      "rank": 29,
      "cve_id": "CVE-2026-49416",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00153,
      "epss_percentile": 0.0471,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeBSD",
      "product": "FreeBSD",
      "cwe": "CWE-190",
      "title": "Integer overflow in vt(4) CONS_HISTORY ioctl",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49416"
    },
    {
      "rank": 30,
      "cve_id": "CVE-2025-59868",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00151,
      "epss_percentile": 0.04499,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HCLSoftware",
      "product": "Traveler for Microsoft Outlook",
      "cwe": "CWE-532",
      "title": "HCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59868"
    },
    {
      "rank": 31,
      "cve_id": "CVE-2026-45259",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00132,
      "epss_percentile": 0.02991,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeBSD",
      "product": "FreeBSD",
      "cwe": "CWE-266",
      "title": "sigqueue(2) missing capability mode restriction",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45259"
    },
    {
      "rank": 32,
      "cve_id": "CVE-2026-49413",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00126,
      "epss_percentile": 0.02503,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeBSD",
      "product": "FreeBSD",
      "cwe": "CWE-266",
      "title": "Flaw in Linuxulator execution of setugid binaries",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49413"
    },
    {
      "rank": 33,
      "cve_id": "CVE-2026-49417",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00125,
      "epss_percentile": 0.02417,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeBSD",
      "product": "FreeBSD",
      "cwe": "CWE-416",
      "title": "Multiple vulnerabilities in the sound(4) mmap path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49417"
    }
  ],
  "transactions": [
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2025-67038",
      "detail": "DUE DATE PASSED — CVE-2025-67038 (Lantronix EDS5000). CISA remediation deadline was June 26, 2026; still in catalog."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-34908",
      "detail": "DUE DATE PASSED — CVE-2026-34908 (Ubiquiti Inc UniFi OS Server). CISA remediation deadline was June 26, 2026; still in catalog."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-34909",
      "detail": "DUE DATE PASSED — CVE-2026-34909 (Ubiquiti Inc UniFi OS Server). CISA remediation deadline was June 26, 2026; still in catalog."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-34910",
      "detail": "DUE DATE PASSED — CVE-2026-34910 (Ubiquiti Inc UniFi OS Server). CISA remediation deadline was June 26, 2026; still in catalog."
    }
  ],
  "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/."
}