{
  "day": "2026-07-23",
  "boundary": "UTC calendar day",
  "published_count": 376,
  "by_severity": {
    "CRITICAL": 63,
    "HIGH": 137,
    "MEDIUM": 166,
    "LOW": 10
  },
  "kev_count": 0,
  "exploit_reference_count": 16,
  "awaiting_enrichment_count": 0,
  "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.",
  "results": [
    {
      "rank": 1,
      "cve_id": "CVE-2026-16723",
      "cvss_base": 9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.15989,
      "epss_percentile": 0.96646,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Alibaba",
      "product": "Fastjson",
      "cwe": "CWE-20",
      "title": "Remote Code Execution in fastjson 1.2.68–1.2.83",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16723"
    },
    {
      "rank": 2,
      "cve_id": "CVE-2026-6516",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.04862,
      "epss_percentile": 0.91358,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Zohocorp",
      "product": "ManageEngine ADAudit Plus",
      "cwe": "CWE-78",
      "title": "Remote Code Execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6516"
    },
    {
      "rank": 3,
      "cve_id": "CVE-2026-47668",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.03882,
      "epss_percentile": 0.89412,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dbgate",
      "product": "dbgate",
      "cwe": "CWE-20",
      "title": "DbGate: Unauthenticated Remote Code Execution via JSON Script Runner",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47668"
    },
    {
      "rank": 4,
      "cve_id": "CVE-2026-65694",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.03394,
      "epss_percentile": 0.87894,
      "kev": false,
      "kev_due_at": null,
      "vendor": "microweber",
      "product": "microweber",
      "cwe": "CWE-22",
      "title": "Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65694"
    },
    {
      "rank": 5,
      "cve_id": "CVE-2026-65919",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.01918,
      "epss_percentile": 0.78302,
      "kev": false,
      "kev_due_at": null,
      "vendor": "meshery",
      "product": "meshery",
      "cwe": "CWE-22",
      "title": "Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65919"
    },
    {
      "rank": 6,
      "cve_id": "CVE-2026-47670",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.01714,
      "epss_percentile": 0.7563,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dbgate",
      "product": "dbgate",
      "cwe": "CWE-77",
      "title": "DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47670"
    },
    {
      "rank": 7,
      "cve_id": "CVE-2026-65700",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.01517,
      "epss_percentile": 0.72589,
      "kev": false,
      "kev_due_at": null,
      "vendor": "h2oai",
      "product": "h2ogpt",
      "cwe": "CWE-22",
      "title": "h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65700"
    },
    {
      "rank": 8,
      "cve_id": "CVE-2026-16763",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.01224,
      "epss_percentile": 0.66472,
      "kev": false,
      "kev_due_at": null,
      "vendor": "localstack",
      "product": "serverless-localstack",
      "cwe": "CWE-77",
      "title": "localstack serverless-localstack Configuration index.js os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16763"
    },
    {
      "rank": 9,
      "cve_id": "CVE-2025-71389",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.012,
      "epss_percentile": 0.65795,
      "kev": false,
      "kev_due_at": null,
      "vendor": "calcom",
      "product": "cal.diy",
      "cwe": "CWE-94",
      "title": "Cal.com before 5.9.9 Remote Code Execution via RSC",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71389"
    },
    {
      "rank": 10,
      "cve_id": "CVE-2026-63732",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.01011,
      "epss_percentile": 0.60521,
      "kev": false,
      "kev_due_at": null,
      "vendor": "decolua",
      "product": "9router",
      "cwe": "CWE-78",
      "title": "9router before 0.4.60 Remote Code Execution via default password",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63732"
    },
    {
      "rank": 11,
      "cve_id": "CVE-2026-65690",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00901,
      "epss_percentile": 0.56992,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bold Reports (By SyncFusion)",
      "product": "Standalone Report Designer",
      "cwe": "CWE-22",
      "title": "Bold Reports Standalone Report Designer < 14.1.12 Path Traversal RCE via File Upload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65690"
    },
    {
      "rank": 12,
      "cve_id": "CVE-2026-65687",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00866,
      "epss_percentile": 0.55935,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bold Reports (By SyncFusion)",
      "product": "Standalone Report Designer",
      "cwe": "CWE-22",
      "title": "Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via SVG Processing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65687"
    },
    {
      "rank": 13,
      "cve_id": "CVE-2026-65688",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00866,
      "epss_percentile": 0.55935,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bold Reports (By SyncFusion)",
      "product": "Standalone Report Designer",
      "cwe": "CWE-22",
      "title": "Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Font Processing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65688"
    },
    {
      "rank": 14,
      "cve_id": "CVE-2026-65689",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00866,
      "epss_percentile": 0.55935,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bold Reports (By SyncFusion)",
      "product": "Standalone Report Designer",
      "cwe": "CWE-22",
      "title": "Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65689"
    },
    {
      "rank": 15,
      "cve_id": "CVE-2026-65608",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00849,
      "epss_percentile": 0.55366,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav",
      "cwe": "CWE-470",
      "title": "Grav before 2.0.9 Remote Code Execution via FlexDirectory",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65608"
    },
    {
      "rank": 16,
      "cve_id": "CVE-2026-16287",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00842,
      "epss_percentile": 0.55136,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TUBITAK BILGEM Software Technologies Research Institute",
      "product": "pardus-update",
      "cwe": "CWE-78",
      "title": "Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16287"
    },
    {
      "rank": 17,
      "cve_id": "CVE-2026-15981",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00796,
      "epss_percentile": 0.5366,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cyberlord92",
      "product": "SAML Single Sign On – SSO Login",
      "cwe": "CWE-287",
      "title": "SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15981"
    },
    {
      "rank": 18,
      "cve_id": "CVE-2026-65605",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0079,
      "epss_percentile": 0.53479,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-79",
      "title": "SiYuan before v3.7.2 Stored XSS to RCE via Attribute View",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65605"
    },
    {
      "rank": 19,
      "cve_id": "CVE-2026-65606",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0079,
      "epss_percentile": 0.53479,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-79",
      "title": "SiYuan before v3.7.2 Cross-Site Scripting to RCE",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65606"
    },
    {
      "rank": 20,
      "cve_id": "CVE-2026-59543",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00789,
      "epss_percentile": 0.53467,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WPLake",
      "product": "Advanced Views",
      "cwe": "CWE-94",
      "title": "WordPress Advanced Views plugin <= 3.8.11 - Remote Code Execution (RCE) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59543"
    },
    {
      "rank": 21,
      "cve_id": "CVE-2026-16756",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.0075,
      "epss_percentile": 0.52183,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AWS",
      "product": "aws-smithy-http-server",
      "cwe": "CWE-770",
      "title": "Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16756"
    },
    {
      "rank": 22,
      "cve_id": "CVE-2026-56165",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00721,
      "epss_percentile": 0.51153,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Microsoft Account",
      "cwe": "CWE-122",
      "title": "Microsoft Account Remote Code Execution Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56165"
    },
    {
      "rank": 23,
      "cve_id": "CVE-2026-15015",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00712,
      "epss_percentile": 0.50819,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cascadiawebservices",
      "product": "MountDev AI MCP Connector for WordPress",
      "cwe": "CWE-862",
      "title": "MountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15015"
    },
    {
      "rank": 24,
      "cve_id": "CVE-2026-63359",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00711,
      "epss_percentile": 0.50815,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Appriss Insights",
      "product": "Victim Information Notification Exchange (VINE)",
      "cwe": "CWE-89",
      "title": "Appriss Insights VINE SQLI",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63359"
    },
    {
      "rank": 25,
      "cve_id": "CVE-2026-54120",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00709,
      "epss_percentile": 0.50727,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Surface Management Services",
      "cwe": "CWE-20",
      "title": "Microsoft Surface Remote Code Execution Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54120"
    },
    {
      "rank": 26,
      "cve_id": "CVE-2026-63765",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00703,
      "epss_percentile": 0.50491,
      "kev": false,
      "kev_due_at": null,
      "vendor": "chatwoot",
      "product": "chatwoot",
      "cwe": "CWE-306",
      "title": "Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63765"
    },
    {
      "rank": 27,
      "cve_id": "CVE-2026-65701",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00695,
      "epss_percentile": 0.50187,
      "kev": false,
      "kev_due_at": null,
      "vendor": "svc-develop-team",
      "product": "so-vits-svc",
      "cwe": "CWE-22",
      "title": "SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65701"
    },
    {
      "rank": 28,
      "cve_id": "CVE-2026-16653",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0069,
      "epss_percentile": 0.50032,
      "kev": false,
      "kev_due_at": null,
      "vendor": "boazsegev",
      "product": "facil.io",
      "cwe": "CWE-22",
      "title": "boazsegev facil.io Public Folder http.c http_sendfile2 path traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16653"
    },
    {
      "rank": 29,
      "cve_id": "CVE-2026-16767",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0068,
      "epss_percentile": 0.49628,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Ne-Lexa",
      "product": "php-zip",
      "cwe": "CWE-22",
      "title": "Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16767"
    },
    {
      "rank": 30,
      "cve_id": "CVE-2026-15074",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00672,
      "epss_percentile": 0.49271,
      "kev": false,
      "kev_due_at": null,
      "vendor": "@fastify/static",
      "product": "@fastify/static",
      "cwe": "CWE-22",
      "title": "@fastify/static vulnerable to route guard bypass via path traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15074"
    },
    {
      "rank": 31,
      "cve_id": "CVE-2026-14282",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00671,
      "epss_percentile": 0.49252,
      "kev": false,
      "kev_due_at": null,
      "vendor": "rtcamp",
      "product": "GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more",
      "cwe": "CWE-434",
      "title": "GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14282"
    },
    {
      "rank": 32,
      "cve_id": "CVE-2026-16796",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00627,
      "epss_percentile": 0.47343,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AWS",
      "product": "bedrock-agentcore 1.18.1",
      "cwe": "CWE-88",
      "title": "Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16796"
    },
    {
      "rank": 33,
      "cve_id": "CVE-2026-16735",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00622,
      "epss_percentile": 0.47097,
      "kev": false,
      "kev_due_at": null,
      "vendor": "release-it",
      "product": "conventional-changelog",
      "cwe": "CWE-77",
      "title": "release-it conventional-changelog Changelog File index.js writeChangelog os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16735"
    },
    {
      "rank": 34,
      "cve_id": "CVE-2026-49035",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00613,
      "epss_percentile": 0.46659,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MZ Automation",
      "product": "libIEC61850",
      "cwe": "CWE-122",
      "title": "Stack-based Buffer Overflow in MZ Automation libIEC61850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49035"
    },
    {
      "rank": 35,
      "cve_id": "CVE-2026-16733",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00612,
      "epss_percentile": 0.46581,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bahmutov",
      "product": "find-cypress-specs",
      "cwe": "CWE-77",
      "title": "bahmutov find-cypress-specs Branch index.js shell.exec os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16733"
    },
    {
      "rank": 36,
      "cve_id": "CVE-2026-25800",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00609,
      "epss_percentile": 0.46456,
      "kev": false,
      "kev_due_at": null,
      "vendor": "quinn-rs",
      "product": "quinn",
      "cwe": "CWE-770",
      "title": "quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25800"
    },
    {
      "rank": 37,
      "cve_id": "CVE-2026-59555",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00605,
      "epss_percentile": 0.46265,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roland Barker",
      "product": "Participants Database",
      "cwe": "CWE-22",
      "title": "WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59555"
    },
    {
      "rank": 38,
      "cve_id": "CVE-2026-16078",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00595,
      "epss_percentile": 0.45782,
      "kev": false,
      "kev_due_at": null,
      "vendor": "kilbot",
      "product": "WCPOS – Point of Sale (POS) plugin for WooCommerce",
      "cwe": "CWE-22",
      "title": "WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16078"
    },
    {
      "rank": 39,
      "cve_id": "CVE-2026-65607",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00586,
      "epss_percentile": 0.45383,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-22",
      "title": "SiYuan before v3.7.2 Path Traversal via /export/temp/",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65607"
    },
    {
      "rank": 40,
      "cve_id": "CVE-2026-56160",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00584,
      "epss_percentile": 0.4528,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Azure Red Hat OpenShift (ARO)",
      "cwe": "CWE-285",
      "title": "Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56160"
    },
    {
      "rank": 41,
      "cve_id": "CVE-2026-15348",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00581,
      "epss_percentile": 0.45142,
      "kev": false,
      "kev_due_at": null,
      "vendor": "codename065",
      "product": "Premium Packages – Sell Digital Products Securely",
      "cwe": "CWE-287",
      "title": "Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15348"
    },
    {
      "rank": 42,
      "cve_id": "CVE-2026-65702",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.0058,
      "epss_percentile": 0.45071,
      "kev": false,
      "kev_due_at": null,
      "vendor": "vanna-ai",
      "product": "vanna",
      "cwe": "CWE-22",
      "title": "Vanna 2.0.2 Path Traversal via FileSystemConversationStore",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65702"
    },
    {
      "rank": 43,
      "cve_id": "CVE-2026-44909",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00573,
      "epss_percentile": 0.44751,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Facebook",
      "product": "proxygen",
      "cwe": null,
      "title": "Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticated attacker could exploit HTTP/2 flow-control by setting SETTINGS_INITIAL_WINDOW_SIZE to 0 or withholding WINDOW_UPDATE frames, causing the server to buffer complete response bodies in memory indefinitely for stalled streams. By opening many simultaneous streams requesting large resources while preventing the server from transmitting responses, an attacker could induce unbounded memory growth leading to service degradation, resource exhaustion, or denial of service. Versions v2017.01.16.00 through v2026.07.20.00 are affected.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44909"
    },
    {
      "rank": 44,
      "cve_id": "CVE-2026-59544",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00564,
      "epss_percentile": 0.44276,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Thrive Themes Coupon",
      "product": "Thrive Quiz Builder",
      "cwe": "CWE-502",
      "title": "WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59544"
    },
    {
      "rank": 45,
      "cve_id": "CVE-2024-58354",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00559,
      "epss_percentile": 0.4399,
      "kev": false,
      "kev_due_at": null,
      "vendor": "calcom",
      "product": "cal.diy",
      "cwe": "CWE-77",
      "title": "cal.com Repository Takeover via pull_request_target Workflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58354"
    },
    {
      "rank": 46,
      "cve_id": "CVE-2026-65497",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00539,
      "epss_percentile": 0.42953,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Complianz",
      "product": "Complianz",
      "cwe": "CWE-502",
      "title": "WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65497"
    },
    {
      "rank": 47,
      "cve_id": "CVE-2026-15827",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00539,
      "epss_percentile": 0.42942,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ataurr",
      "product": "GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor",
      "cwe": "CWE-862",
      "title": "GutenKit <= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15827"
    },
    {
      "rank": 48,
      "cve_id": "CVE-2026-65906",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00535,
      "epss_percentile": 0.42741,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "TeamCity",
      "cwe": "CWE-94",
      "title": "In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65906"
    },
    {
      "rank": 49,
      "cve_id": "CVE-2026-14291",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00531,
      "epss_percentile": 0.42487,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "security-ninja-premium",
      "cwe": "CWE-287",
      "title": "Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14291"
    },
    {
      "rank": 50,
      "cve_id": "CVE-2026-47723",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00526,
      "epss_percentile": 0.42202,
      "kev": false,
      "kev_due_at": null,
      "vendor": "juev",
      "product": "nebula-mesh",
      "cwe": "CWE-1021",
      "title": "nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47723"
    },
    {
      "rank": 51,
      "cve_id": "CVE-2026-65897",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00523,
      "epss_percentile": 0.42025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav",
      "cwe": "CWE-269",
      "title": "Grav API Plugin 1.0.9 Privilege Escalation via Invitations groups",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65897"
    },
    {
      "rank": 52,
      "cve_id": "CVE-2026-47752",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00518,
      "epss_percentile": 0.41681,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Quenary",
      "product": "tugtainer",
      "cwe": "CWE-1336",
      "title": "Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47752"
    },
    {
      "rank": 53,
      "cve_id": "CVE-2026-52439",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00515,
      "epss_percentile": 0.41483,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-917",
      "title": "An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52439"
    },
    {
      "rank": 54,
      "cve_id": "CVE-2026-47669",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00515,
      "epss_percentile": 0.41525,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dbgate",
      "product": "dbgate",
      "cwe": "CWE-22",
      "title": "DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47669"
    },
    {
      "rank": 55,
      "cve_id": "CVE-2026-42933",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00512,
      "epss_percentile": 0.41309,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pronetiqs",
      "product": "Panduit Intravue",
      "cwe": "CWE-441",
      "title": "Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42933"
    },
    {
      "rank": 56,
      "cve_id": "CVE-2026-64813",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00511,
      "epss_percentile": 0.41249,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-602",
      "title": "In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64813"
    },
    {
      "rank": 57,
      "cve_id": "CVE-2026-65917",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00506,
      "epss_percentile": 0.40897,
      "kev": false,
      "kev_due_at": null,
      "vendor": "usmannasir",
      "product": "cyberpanel",
      "cwe": "CWE-639",
      "title": "CyberPanel IncBackups IDOR via Sequential Backup ID",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65917"
    },
    {
      "rank": 58,
      "cve_id": "CVE-2026-44210",
      "cvss_base": 5.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00502,
      "epss_percentile": 0.40657,
      "kev": false,
      "kev_due_at": null,
      "vendor": "kata-containers",
      "product": "kata-containers",
      "cwe": "CWE-88",
      "title": "Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44210"
    },
    {
      "rank": 59,
      "cve_id": "CVE-2024-58330",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.005,
      "epss_percentile": 0.40548,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bosch",
      "product": "Camera Firmware",
      "cwe": "CWE-284",
      "title": "A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58330"
    },
    {
      "rank": 60,
      "cve_id": "CVE-2026-27064",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00499,
      "epss_percentile": 0.40489,
      "kev": false,
      "kev_due_at": null,
      "vendor": "EverPress",
      "product": "Mailster",
      "cwe": "CWE-434",
      "title": "WordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27064"
    },
    {
      "rank": 61,
      "cve_id": "CVE-2026-65455",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00499,
      "epss_percentile": 0.40487,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MapSVG",
      "product": "MapSVG",
      "cwe": "CWE-434",
      "title": "WordPress MapSVG plugin <= 8.14.0 - Arbitrary File Upload vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65455"
    },
    {
      "rank": 62,
      "cve_id": "CVE-2026-65461",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00499,
      "epss_percentile": 0.40488,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webの相談所",
      "product": "Really Simple CSV Importer",
      "cwe": "CWE-434",
      "title": "WordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65461"
    },
    {
      "rank": 63,
      "cve_id": "CVE-2026-15011",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00494,
      "epss_percentile": 0.4017,
      "kev": false,
      "kev_due_at": null,
      "vendor": "emarket-design",
      "product": "Customer Support Ticket System & Helpdesk",
      "cwe": "CWE-94",
      "title": "Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15011"
    },
    {
      "rank": 64,
      "cve_id": "CVE-2026-21655",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00492,
      "epss_percentile": 0.39998,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Johnson Control",
      "product": "victor",
      "cwe": "CWE-502",
      "title": "C-CURE 9000 and Victor application server - Deserialization of Untrusted Data",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21655"
    },
    {
      "rank": 65,
      "cve_id": "CVE-2026-64800",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00491,
      "epss_percentile": 0.3998,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "GoLand",
      "cwe": "CWE-532",
      "title": "In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64800"
    },
    {
      "rank": 66,
      "cve_id": "CVE-2026-65916",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00488,
      "epss_percentile": 0.39772,
      "kev": false,
      "kev_due_at": null,
      "vendor": "usmannasir",
      "product": "cyberpanel",
      "cwe": "CWE-862",
      "title": "CyberPanel Missing Authorization in cancelBackupCreation Handler",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65916"
    },
    {
      "rank": 67,
      "cve_id": "CVE-2026-59540",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00483,
      "epss_percentile": 0.39402,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Cozy Vision Technologies Pvt. Ltd.",
      "product": "SMS Alert Order Notifications",
      "cwe": "CWE-266",
      "title": "WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59540"
    },
    {
      "rank": 68,
      "cve_id": "CVE-2026-61951",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00483,
      "epss_percentile": 0.394,
      "kev": false,
      "kev_due_at": null,
      "vendor": "themetechmount",
      "product": "TrueBooker",
      "cwe": "CWE-266",
      "title": "WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61951"
    },
    {
      "rank": 69,
      "cve_id": "CVE-2026-65695",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00483,
      "epss_percentile": 0.39427,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GongRzhe",
      "product": "Office-Word-MCP-Server",
      "cwe": "CWE-22",
      "title": "Office-Word-MCP-Server 1.1.11 Path Traversal via document tools",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65695"
    },
    {
      "rank": 70,
      "cve_id": "CVE-2026-47724",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00481,
      "epss_percentile": 0.39311,
      "kev": false,
      "kev_due_at": null,
      "vendor": "juev",
      "product": "nebula-mesh",
      "cwe": "CWE-862",
      "title": "nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47724"
    },
    {
      "rank": 71,
      "cve_id": "CVE-2026-65896",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00476,
      "epss_percentile": 0.38982,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav",
      "cwe": "CWE-73",
      "title": "Grav API Plugin before 1.0.10 Path Traversal via move",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65896"
    },
    {
      "rank": 72,
      "cve_id": "CVE-2026-64812",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00473,
      "epss_percentile": 0.38766,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-306",
      "title": "In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64812"
    },
    {
      "rank": 73,
      "cve_id": "CVE-2026-15906",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00472,
      "epss_percentile": 0.38735,
      "kev": false,
      "kev_due_at": null,
      "vendor": "codename065",
      "product": "Premium Packages – Sell Digital Products Securely",
      "cwe": "CWE-89",
      "title": "Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15906"
    },
    {
      "rank": 74,
      "cve_id": "CVE-2026-59542",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.0047,
      "epss_percentile": 0.3852,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WP Chill",
      "product": "Kali Forms",
      "cwe": "CWE-22",
      "title": "WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59542"
    },
    {
      "rank": 75,
      "cve_id": "CVE-2026-65698",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0047,
      "epss_percentile": 0.38555,
      "kev": false,
      "kev_due_at": null,
      "vendor": "voideditor",
      "product": "void",
      "cwe": "CWE-22",
      "title": "Void 1.3.4 Path Traversal via AI Agent File-Reading Tools",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65698"
    },
    {
      "rank": 76,
      "cve_id": "CVE-2026-47722",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00467,
      "epss_percentile": 0.38385,
      "kev": false,
      "kev_due_at": null,
      "vendor": "juev",
      "product": "nebula-mesh",
      "cwe": "CWE-94",
      "title": "nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47722"
    },
    {
      "rank": 77,
      "cve_id": "CVE-2026-64600",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00467,
      "epss_percentile": 0.38354,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": "CWE-362",
      "title": "xfs: resample the data fork mapping after cycling ILOCK",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64600"
    },
    {
      "rank": 78,
      "cve_id": "CVE-2026-47769",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00467,
      "epss_percentile": 0.38371,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Work90210",
      "product": "APIFold",
      "cwe": "CWE-306",
      "title": "APIFold Vulnerable to Unauthenticated Webhook Event Injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47769"
    },
    {
      "rank": 79,
      "cve_id": "CVE-2026-14257",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00466,
      "epss_percentile": 0.38245,
      "kev": false,
      "kev_due_at": null,
      "vendor": "juliangruber",
      "product": "brace-expansion",
      "cwe": "CWE-400",
      "title": "brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14257"
    },
    {
      "rank": 80,
      "cve_id": "CVE-2026-63313",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00465,
      "epss_percentile": 0.38189,
      "kev": false,
      "kev_due_at": null,
      "vendor": "decolua",
      "product": "9router",
      "cwe": "CWE-918",
      "title": "9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63313"
    },
    {
      "rank": 81,
      "cve_id": "CVE-2026-9713",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00463,
      "epss_percentile": 0.38062,
      "kev": false,
      "kev_due_at": null,
      "vendor": "King-Theme",
      "product": "Product Designer for WooCommerce WordPress | Lumise",
      "cwe": "CWE-89",
      "title": "Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9713"
    },
    {
      "rank": 82,
      "cve_id": "CVE-2026-50032",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.0046,
      "epss_percentile": 0.37888,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MZ Automation",
      "product": "libIEC61850",
      "cwe": "CWE-476",
      "title": "NULL Pointer Dereference in MZ Automation libIEC61850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50032"
    },
    {
      "rank": 83,
      "cve_id": "CVE-2026-50039",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00458,
      "epss_percentile": 0.37733,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MZ Automation",
      "product": "libIEC61850",
      "cwe": "CWE-121",
      "title": "Stack-based Buffer Overflow in MZ Automation libIEC61850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50039"
    },
    {
      "rank": 84,
      "cve_id": "CVE-2026-59545",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00456,
      "epss_percentile": 0.37598,
      "kev": false,
      "kev_due_at": null,
      "vendor": "miniOrange",
      "product": "miniOrange Discord Integration",
      "cwe": "CWE-288",
      "title": "WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59545"
    },
    {
      "rank": 85,
      "cve_id": "CVE-2026-13009",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00451,
      "epss_percentile": 0.373,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wupsales",
      "product": "AI Copilot – Content Generator",
      "cwe": "CWE-89",
      "title": "AI Copilot <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13009"
    },
    {
      "rank": 86,
      "cve_id": "CVE-2026-15761",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00451,
      "epss_percentile": 0.373,
      "kev": false,
      "kev_due_at": null,
      "vendor": "tickera",
      "product": "Tickera – Sell Tickets & Manage Events",
      "cwe": "CWE-89",
      "title": "Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15761"
    },
    {
      "rank": 87,
      "cve_id": "CVE-2026-6924",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00445,
      "epss_percentile": 0.36824,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Silicon Labs",
      "product": "Silicon Labs Matter Github",
      "cwe": "CWE-336",
      "title": "Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6924"
    },
    {
      "rank": 88,
      "cve_id": "CVE-2026-12353",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00437,
      "epss_percentile": 0.36194,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Certificate System 9",
      "cwe": "CWE-772",
      "title": "Rhcs: memory leak during https connection leads to denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12353"
    },
    {
      "rank": 89,
      "cve_id": "CVE-2026-65762",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00436,
      "epss_percentile": 0.3617,
      "kev": false,
      "kev_due_at": null,
      "vendor": "phoca.cz",
      "product": "Phoca Guestbook extension for Joomla",
      "cwe": "CWE-79",
      "title": "Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65762"
    },
    {
      "rank": 90,
      "cve_id": "CVE-2026-65763",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00436,
      "epss_percentile": 0.36169,
      "kev": false,
      "kev_due_at": null,
      "vendor": "phoca.cz",
      "product": "Phoca Maps extension for Joomla",
      "cwe": "CWE-79",
      "title": "Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65763"
    },
    {
      "rank": 91,
      "cve_id": "CVE-2026-65759",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00435,
      "epss_percentile": 0.3605,
      "kev": false,
      "kev_due_at": null,
      "vendor": "joomshaper.com",
      "product": "Easy Store extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65759"
    },
    {
      "rank": 92,
      "cve_id": "CVE-2026-16765",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00431,
      "epss_percentile": 0.35658,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CodeAstro",
      "product": "Online Classroom",
      "cwe": "CWE-74",
      "title": "CodeAstro Online Classroom loginlinkadmin.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16765"
    },
    {
      "rank": 93,
      "cve_id": "CVE-2026-65477",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00429,
      "epss_percentile": 0.35482,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Select-Themes",
      "product": "Tonda Core",
      "cwe": "CWE-98",
      "title": "WordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65477"
    },
    {
      "rank": 94,
      "cve_id": "CVE-2026-65481",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00429,
      "epss_percentile": 0.35482,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Elated-Themes",
      "product": "Vino",
      "cwe": "CWE-98",
      "title": "WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65481"
    },
    {
      "rank": 95,
      "cve_id": "CVE-2026-43823",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00428,
      "epss_percentile": 0.35447,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "swift-crypto",
      "cwe": "CWE-415",
      "title": "When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes provided. This vulnerability is addressed in swift-crypto version 4.5.1.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43823"
    },
    {
      "rank": 96,
      "cve_id": "CVE-2026-16807",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00427,
      "epss_percentile": 0.35378,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Google",
      "product": "Chrome",
      "cwe": "CWE-787",
      "title": "Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16807"
    },
    {
      "rank": 97,
      "cve_id": "CVE-2026-16002",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00426,
      "epss_percentile": 0.35306,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MZ Automation",
      "product": "lib60870",
      "cwe": "CWE-125",
      "title": "Out-of-bounds Read in MZ Automation lib60870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16002"
    },
    {
      "rank": 98,
      "cve_id": "CVE-2026-59554",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00426,
      "epss_percentile": 0.35307,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Ziina",
      "product": "Ziina",
      "cwe": "CWE-1390",
      "title": "WordPress Ziina plugin <= 1.2.21 - Broken Authentication vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59554"
    },
    {
      "rank": 99,
      "cve_id": "CVE-2026-65495",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00426,
      "epss_percentile": 0.35232,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dokan Multivendor Plugin",
      "product": "Dokan Pro",
      "cwe": "CWE-862",
      "title": "WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65495"
    },
    {
      "rank": 100,
      "cve_id": "CVE-2026-65760",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00421,
      "epss_percentile": 0.34906,
      "kev": false,
      "kev_due_at": null,
      "vendor": "joomshaper.com",
      "product": "Easy Store extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65760"
    },
    {
      "rank": 101,
      "cve_id": "CVE-2026-65907",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00421,
      "epss_percentile": 0.34839,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "TeamCity",
      "cwe": "CWE-94",
      "title": "In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65907"
    },
    {
      "rank": 102,
      "cve_id": "CVE-2026-14481",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00419,
      "epss_percentile": 0.34625,
      "kev": false,
      "kev_due_at": null,
      "vendor": "equalizedigital",
      "product": "Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance",
      "cwe": "CWE-79",
      "title": "Equalize Digital Accessibility Checker <= 1.46.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'html' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14481"
    },
    {
      "rank": 103,
      "cve_id": "CVE-2026-16804",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00418,
      "epss_percentile": 0.34604,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Google",
      "product": "Chrome",
      "cwe": "CWE-416",
      "title": "Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16804"
    },
    {
      "rank": 104,
      "cve_id": "CVE-2026-16745",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00417,
      "epss_percentile": 0.34435,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat OpenShift AI 2.25",
      "cwe": "CWE-346",
      "title": "Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16745"
    },
    {
      "rank": 105,
      "cve_id": "CVE-2026-59541",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00417,
      "epss_percentile": 0.34485,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Hakan Ozevin",
      "product": "WP BASE Booking",
      "cwe": "CWE-266",
      "title": "WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59541"
    },
    {
      "rank": 106,
      "cve_id": "CVE-2026-59524",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00417,
      "epss_percentile": 0.34462,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Sandhills Development, LLC",
      "product": "Easy Digital Downloads",
      "cwe": "CWE-288",
      "title": "WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59524"
    },
    {
      "rank": 107,
      "cve_id": "CVE-2026-28698",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00416,
      "epss_percentile": 0.34344,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pronetiqs",
      "product": "Panduit Intravue",
      "cwe": "CWE-497",
      "title": "Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28698"
    },
    {
      "rank": 108,
      "cve_id": "CVE-2024-58353",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00415,
      "epss_percentile": 0.34336,
      "kev": false,
      "kev_due_at": null,
      "vendor": "calcom",
      "product": "cal.diy",
      "cwe": "CWE-80",
      "title": "Cal.com through 4.7.15 Cross-Site Scripting via booking questions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58353"
    },
    {
      "rank": 109,
      "cve_id": "CVE-2024-58355",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00415,
      "epss_percentile": 0.34336,
      "kev": false,
      "kev_due_at": null,
      "vendor": "calcom",
      "product": "cal.diy",
      "cwe": "CWE-80",
      "title": "Cal.com through 4.7.15 Cross-Site Scripting via booking questions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58355"
    },
    {
      "rank": 110,
      "cve_id": "CVE-2026-56167",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00414,
      "epss_percentile": 0.34213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Azure AI Search",
      "cwe": "CWE-918",
      "title": "Azure AI Search Elevation of Privilege Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56167"
    },
    {
      "rank": 111,
      "cve_id": "CVE-2026-13119",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00413,
      "epss_percentile": 0.34074,
      "kev": false,
      "kev_due_at": null,
      "vendor": "roundupwp",
      "product": "Registrations for the Events Calendar – Event Registration Plugin",
      "cwe": "CWE-89",
      "title": "Registrations for the Events Calendar <= 3.2 - Authenticated (Contributor+) SQL Injection via 'standard' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13119"
    },
    {
      "rank": 112,
      "cve_id": "CVE-2026-15448",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00413,
      "epss_percentile": 0.34075,
      "kev": false,
      "kev_due_at": null,
      "vendor": "tickera",
      "product": "Tickera – Sell Tickets & Manage Events",
      "cwe": "CWE-89",
      "title": "Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15448"
    },
    {
      "rank": 113,
      "cve_id": "CVE-2026-57696",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00409,
      "epss_percentile": 0.33748,
      "kev": false,
      "kev_due_at": null,
      "vendor": "videowhisper",
      "product": "Picture Gallery",
      "cwe": "CWE-22",
      "title": "WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57696"
    },
    {
      "rank": 114,
      "cve_id": "CVE-2026-16764",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00407,
      "epss_percentile": 0.33569,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OWASP",
      "product": "DefectDojo",
      "cwe": "CWE-266",
      "title": "OWASP DefectDojo API/Web serializers.py UserSerializer privileges management",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16764"
    },
    {
      "rank": 115,
      "cve_id": "CVE-2026-12082",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00406,
      "epss_percentile": 0.33516,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Praison AI SEO",
      "cwe": "CWE-862",
      "title": "Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12082"
    },
    {
      "rank": 116,
      "cve_id": "CVE-2026-16768",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00405,
      "epss_percentile": 0.33397,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GNOME",
      "product": "gdk-pixbuf",
      "cwe": "CWE-125",
      "title": "Gdk-pixbuf: out-of-bounds read in ico parser",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16768"
    },
    {
      "rank": 117,
      "cve_id": "CVE-2026-59525",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.004,
      "epss_percentile": 0.32881,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roland Barker",
      "product": "Participants Database",
      "cwe": "CWE-89",
      "title": "WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59525"
    },
    {
      "rank": 118,
      "cve_id": "CVE-2026-59526",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.004,
      "epss_percentile": 0.32881,
      "kev": false,
      "kev_due_at": null,
      "vendor": "RomanCode",
      "product": "MapSVG",
      "cwe": "CWE-89",
      "title": "WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59526"
    },
    {
      "rank": 119,
      "cve_id": "CVE-2026-61949",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.004,
      "epss_percentile": 0.32877,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bookly",
      "product": "Bookly",
      "cwe": "CWE-89",
      "title": "WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61949"
    },
    {
      "rank": 120,
      "cve_id": "CVE-2026-61950",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.004,
      "epss_percentile": 0.32877,
      "kev": false,
      "kev_due_at": null,
      "vendor": "themetechmount",
      "product": "TrueBooker",
      "cwe": "CWE-89",
      "title": "WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61950"
    },
    {
      "rank": 121,
      "cve_id": "CVE-2026-65493",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.004,
      "epss_percentile": 0.32882,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dokan",
      "product": "Dokan Pro",
      "cwe": "CWE-502",
      "title": "WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65493"
    },
    {
      "rank": 122,
      "cve_id": "CVE-2026-65920",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00398,
      "epss_percentile": 0.32623,
      "kev": false,
      "kev_due_at": null,
      "vendor": "huggingface",
      "product": "diffusers",
      "cwe": "CWE-22",
      "title": "Diffusers Path Traversal via weight_map Arbitrary File Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65920"
    },
    {
      "rank": 123,
      "cve_id": "CVE-2026-15786",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00398,
      "epss_percentile": 0.32601,
      "kev": false,
      "kev_due_at": null,
      "vendor": "gowebsmarty",
      "product": "WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security",
      "cwe": "CWE-22",
      "title": "WP Encryption <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15786"
    },
    {
      "rank": 124,
      "cve_id": "CVE-2026-40430",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00394,
      "epss_percentile": 0.32192,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pronetiqs",
      "product": "Panduit Intravue",
      "cwe": "CWE-256",
      "title": "Plaintext Storage of a Password in Panduit IntraVUE by Pronetiqs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40430"
    },
    {
      "rank": 125,
      "cve_id": "CVE-2026-65500",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00394,
      "epss_percentile": 0.32191,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pixelacehq",
      "product": "Manual - Documentation, Knowledge Base & Education WordPress Theme",
      "cwe": "CWE-862",
      "title": "WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65500"
    },
    {
      "rank": 126,
      "cve_id": "CVE-2026-21653",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00388,
      "epss_percentile": 0.31603,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Johnson Controls",
      "product": "CCure 9000 and victor application server",
      "cwe": "CWE-918",
      "title": "CCure and Victor Application Server - Server Side Request Forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21653"
    },
    {
      "rank": 127,
      "cve_id": "CVE-2026-16805",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00387,
      "epss_percentile": 0.31511,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Google",
      "product": "Chrome",
      "cwe": "CWE-416",
      "title": "Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16805"
    },
    {
      "rank": 128,
      "cve_id": "CVE-2026-16806",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00387,
      "epss_percentile": 0.31512,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Google",
      "product": "Chrome",
      "cwe": "CWE-416",
      "title": "Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16806"
    },
    {
      "rank": 129,
      "cve_id": "CVE-2026-47743",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00384,
      "epss_percentile": 0.3117,
      "kev": false,
      "kev_due_at": null,
      "vendor": "shopperlabs",
      "product": "shopper",
      "cwe": "CWE-79",
      "title": "Shopper: Multiple data integrity and disclosure issues in admin Livewire components",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47743"
    },
    {
      "rank": 130,
      "cve_id": "CVE-2026-65462",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00383,
      "epss_percentile": 0.3105,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Uncanny Owl",
      "product": "Uncanny Automator",
      "cwe": "CWE-89",
      "title": "WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65462"
    },
    {
      "rank": 131,
      "cve_id": "CVE-2026-65532",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00383,
      "epss_percentile": 0.31049,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PersianScript",
      "product": "Persian Woocommerce SMS",
      "cwe": "CWE-89",
      "title": "WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65532"
    },
    {
      "rank": 132,
      "cve_id": "CVE-2026-63226",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00383,
      "epss_percentile": 0.31061,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Ricoh Company",
      "product": "Ricoh printers and Multifunction Printers (MFPs)",
      "cwe": "CWE-923",
      "title": "Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63226"
    },
    {
      "rank": 133,
      "cve_id": "CVE-2026-27377",
      "cvss_base": 6.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00383,
      "epss_percentile": 0.31051,
      "kev": false,
      "kev_due_at": null,
      "vendor": "axiomthemes",
      "product": "QuickCal - Appointment Booking Calendar for WordPress",
      "cwe": "CWE-862",
      "title": "WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27377"
    },
    {
      "rank": 134,
      "cve_id": "CVE-2026-27355",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00381,
      "epss_percentile": 0.30857,
      "kev": false,
      "kev_due_at": null,
      "vendor": "metaphorcreations",
      "product": "Ditty",
      "cwe": "CWE-862",
      "title": "WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27355"
    },
    {
      "rank": 135,
      "cve_id": "CVE-2026-65431",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0038,
      "epss_percentile": 0.30787,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "GeoIP extension for Joomla",
      "cwe": "CWE-22",
      "title": "Joomla Extension - regularlabs.com - Zipslip in GeoIP extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65431"
    },
    {
      "rank": 136,
      "cve_id": "CVE-2026-57716",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00375,
      "epss_percentile": 0.30267,
      "kev": false,
      "kev_due_at": null,
      "vendor": "videowhisper",
      "product": "Broadcast Live Video",
      "cwe": "CWE-22",
      "title": "WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57716"
    },
    {
      "rank": 137,
      "cve_id": "CVE-2026-27372",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00374,
      "epss_percentile": 0.30119,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pepro Dev. Group",
      "product": "PeproDev Ultimate Invoice",
      "cwe": "CWE-201",
      "title": "WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27372"
    },
    {
      "rank": 138,
      "cve_id": "CVE-2026-61945",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00371,
      "epss_percentile": 0.29814,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MultiVendorX",
      "product": "WooCommerce Product Stock Alert",
      "cwe": "CWE-497",
      "title": "WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61945"
    },
    {
      "rank": 139,
      "cve_id": "CVE-2026-7120",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00369,
      "epss_percentile": 0.29571,
      "kev": false,
      "kev_due_at": null,
      "vendor": "@fastify/static",
      "product": "@fastify/static",
      "cwe": "CWE-180",
      "title": "@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7120"
    },
    {
      "rank": 140,
      "cve_id": "CVE-2026-48013",
      "cvss_base": 4.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00366,
      "epss_percentile": 0.29311,
      "kev": false,
      "kev_due_at": null,
      "vendor": "shopware",
      "product": "shopware",
      "cwe": "CWE-918",
      "title": "Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48013"
    },
    {
      "rank": 141,
      "cve_id": "CVE-2026-15017",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00362,
      "epss_percentile": 0.28894,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mdjm",
      "product": "MDJM Event Management",
      "cwe": "CWE-269",
      "title": "MDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15017"
    },
    {
      "rank": 142,
      "cve_id": "CVE-2026-8287",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00359,
      "epss_percentile": 0.28581,
      "kev": false,
      "kev_due_at": null,
      "vendor": "BizimHesap Information Systems Industry and Trade Inc.",
      "product": "Online Pre-Accounting Software",
      "cwe": "CWE-770",
      "title": "Unrestricted File Upload in BizimHesap Information Systems' Online Pre-Accounting Software",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8287"
    },
    {
      "rank": 143,
      "cve_id": "CVE-2026-15617",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00358,
      "epss_percentile": 0.28437,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Logto",
      "product": "Logto",
      "cwe": "CWE-178",
      "title": "Principal/domain lookup without case normalization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15617"
    },
    {
      "rank": 144,
      "cve_id": "CVE-2026-24552",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00357,
      "epss_percentile": 0.28395,
      "kev": false,
      "kev_due_at": null,
      "vendor": "John-Michael L'Allier",
      "product": "Create",
      "cwe": "CWE-89",
      "title": "WordPress Create plugin <= 2.5.3 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24552"
    },
    {
      "rank": 145,
      "cve_id": "CVE-2026-25405",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00357,
      "epss_percentile": 0.28393,
      "kev": false,
      "kev_due_at": null,
      "vendor": "DigitalME",
      "product": "eRoom",
      "cwe": "CWE-89",
      "title": "WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25405"
    },
    {
      "rank": 146,
      "cve_id": "CVE-2026-65450",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00357,
      "epss_percentile": 0.28397,
      "kev": false,
      "kev_due_at": null,
      "vendor": "RomanCode",
      "product": "MapSVG",
      "cwe": "CWE-89",
      "title": "WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65450"
    },
    {
      "rank": 147,
      "cve_id": "CVE-2026-65451",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00357,
      "epss_percentile": 0.28395,
      "kev": false,
      "kev_due_at": null,
      "vendor": "RomanCode",
      "product": "MapSVG",
      "cwe": "CWE-89",
      "title": "WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65451"
    },
    {
      "rank": 148,
      "cve_id": "CVE-2026-65454",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00357,
      "epss_percentile": 0.28393,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ExpressTech Systems",
      "product": "Quiz And Survey Master",
      "cwe": "CWE-89",
      "title": "WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65454"
    },
    {
      "rank": 149,
      "cve_id": "CVE-2026-65526",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00357,
      "epss_percentile": 0.28392,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Themeisle",
      "product": "Visualizer",
      "cwe": "CWE-89",
      "title": "WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65526"
    },
    {
      "rank": 150,
      "cve_id": "CVE-2026-47755",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00354,
      "epss_percentile": 0.28004,
      "kev": false,
      "kev_due_at": null,
      "vendor": "itflow-org",
      "product": "itflow",
      "cwe": "CWE-639",
      "title": "ITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47755"
    },
    {
      "rank": 151,
      "cve_id": "CVE-2026-15687",
      "cvss_base": 2.4,
      "cvss_severity": "LOW",
      "epss_score": 0.00353,
      "epss_percentile": 0.27875,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Kubernetes",
      "product": "kubernetes-client/java",
      "cwe": "CWE-22",
      "title": "Path traversal via non-tar copyDirectoryFromPod",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15687"
    },
    {
      "rank": 152,
      "cve_id": "CVE-2026-15611",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00352,
      "epss_percentile": 0.27822,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Logto",
      "product": "Logto",
      "cwe": "CWE-287",
      "title": "Unverified email-based SSO account linking",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15611"
    },
    {
      "rank": 153,
      "cve_id": "CVE-2026-65761",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00347,
      "epss_percentile": 0.27311,
      "kev": false,
      "kev_due_at": null,
      "vendor": "joomshaper.com",
      "product": "Easy Store extension for Joomla",
      "cwe": "CWE-89",
      "title": "Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65761"
    },
    {
      "rank": 154,
      "cve_id": "CVE-2026-59547",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00346,
      "epss_percentile": 0.27203,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Easy Payment",
      "product": "Payment Gateway for PayPal on WooCommerce",
      "cwe": "CWE-862",
      "title": "WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59547"
    },
    {
      "rank": 155,
      "cve_id": "CVE-2026-61954",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00346,
      "epss_percentile": 0.27201,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PayU India",
      "product": "PayU India",
      "cwe": "CWE-862",
      "title": "WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61954"
    },
    {
      "rank": 156,
      "cve_id": "CVE-2026-64611",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00346,
      "epss_percentile": 0.27139,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Enterprise Linux 10",
      "cwe": "CWE-835",
      "title": "Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64611"
    },
    {
      "rank": 157,
      "cve_id": "CVE-2026-7232",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00345,
      "epss_percentile": 0.2704,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FormCraft",
      "product": "FormCraft",
      "cwe": "CWE-79",
      "title": "FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7232"
    },
    {
      "rank": 158,
      "cve_id": "CVE-2026-44955",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00345,
      "epss_percentile": 0.2699,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pronetiqs",
      "product": "Panduit Intravue",
      "cwe": "CWE-497",
      "title": "Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44955"
    },
    {
      "rank": 159,
      "cve_id": "CVE-2026-59522",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0034,
      "epss_percentile": 0.26538,
      "kev": false,
      "kev_due_at": null,
      "vendor": "weDevs",
      "product": "WP ERP",
      "cwe": "CWE-862",
      "title": "WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59522"
    },
    {
      "rank": 160,
      "cve_id": "CVE-2026-57367",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00338,
      "epss_percentile": 0.26289,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WP Booking System .",
      "product": "WP Booking System",
      "cwe": "CWE-862",
      "title": "WordPress WP Booking System plugin < 5.12.8.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57367"
    },
    {
      "rank": 161,
      "cve_id": "CVE-2026-65754",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00335,
      "epss_percentile": 0.25959,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "ReReplacer PRo extension for Joomla",
      "cwe": "CWE-22",
      "title": "Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65754"
    },
    {
      "rank": 162,
      "cve_id": "CVE-2026-57425",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00332,
      "epss_percentile": 0.25572,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wpdesk",
      "product": "Autopay dla WooCommerce",
      "cwe": "CWE-862",
      "title": "WordPress Autopay dla WooCommerce plugin <= 2.2.27 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57425"
    },
    {
      "rank": 163,
      "cve_id": "CVE-2026-57717",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00332,
      "epss_percentile": 0.25578,
      "kev": false,
      "kev_due_at": null,
      "vendor": "knitpay",
      "product": "Knit Pay",
      "cwe": "CWE-862",
      "title": "WordPress Knit Pay plugin <= 9.6.0.0 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57717"
    },
    {
      "rank": 164,
      "cve_id": "CVE-2026-9729",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00331,
      "epss_percentile": 0.25499,
      "kev": false,
      "kev_due_at": null,
      "vendor": "webpushr",
      "product": "Web Push Notifications – Webpushr",
      "cwe": "CWE-79",
      "title": "Web Push Notifications <= 4.39.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'webpushr_notification_title' Post Meta Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9729"
    },
    {
      "rank": 165,
      "cve_id": "CVE-2026-15394",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00331,
      "epss_percentile": 0.25498,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mahethekiller",
      "product": "Header Footer Script Adder",
      "cwe": "CWE-79",
      "title": "Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15394"
    },
    {
      "rank": 166,
      "cve_id": "CVE-2026-15404",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00331,
      "epss_percentile": 0.25494,
      "kev": false,
      "kev_due_at": null,
      "vendor": "niklaslindemann",
      "product": "Bulk Page Generator – LPagery",
      "cwe": "CWE-79",
      "title": "Bulk Page Generator <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15404"
    },
    {
      "rank": 167,
      "cve_id": "CVE-2026-15646",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00331,
      "epss_percentile": 0.25497,
      "kev": false,
      "kev_due_at": null,
      "vendor": "berocket",
      "product": "Brands for WooCommerce",
      "cwe": "CWE-79",
      "title": "Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15646"
    },
    {
      "rank": 168,
      "cve_id": "CVE-2026-15794",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00331,
      "epss_percentile": 0.25494,
      "kev": false,
      "kev_due_at": null,
      "vendor": "berocket",
      "product": "Grid/List View for WooCommerce",
      "cwe": "CWE-79",
      "title": "Grid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15794"
    },
    {
      "rank": 169,
      "cve_id": "CVE-2026-64815",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0033,
      "epss_percentile": 0.2535,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-94",
      "title": "In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64815"
    },
    {
      "rank": 170,
      "cve_id": "CVE-2026-65918",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0033,
      "epss_percentile": 0.25282,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pytorch",
      "product": "vision",
      "cwe": "CWE-125",
      "title": "PyTorch torchvision GIF Decoder Out-of-bounds Heap Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65918"
    },
    {
      "rank": 171,
      "cve_id": "CVE-2026-65474",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0033,
      "epss_percentile": 0.25314,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WPManageNinja",
      "product": "Ninja Tables",
      "cwe": "CWE-497",
      "title": "WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65474"
    },
    {
      "rank": 172,
      "cve_id": "CVE-2026-65490",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0033,
      "epss_percentile": 0.25317,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mischiefmarmot",
      "product": "Create by Mediavine",
      "cwe": "CWE-497",
      "title": "WordPress Create by Mediavine plugin <= 2.5.3 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65490"
    },
    {
      "rank": 173,
      "cve_id": "CVE-2026-65498",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0033,
      "epss_percentile": 0.25313,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Complianz",
      "product": "Complianz",
      "cwe": "CWE-497",
      "title": "WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65498"
    },
    {
      "rank": 174,
      "cve_id": "CVE-2026-65505",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0033,
      "epss_percentile": 0.25314,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bdthemes",
      "product": "Ultimate Store Kit Elementor Addons",
      "cwe": "CWE-497",
      "title": "WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65505"
    },
    {
      "rank": 175,
      "cve_id": "CVE-2026-65521",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0033,
      "epss_percentile": 0.25316,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mahmudul Hasan Arif",
      "product": "WP Social Ninja",
      "cwe": "CWE-497",
      "title": "WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65521"
    },
    {
      "rank": 176,
      "cve_id": "CVE-2026-65895",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00329,
      "epss_percentile": 0.25181,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav",
      "cwe": "CWE-862",
      "title": "Grav API Plugin before 1.0.10 Broken Access Control",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65895"
    },
    {
      "rank": 177,
      "cve_id": "CVE-2026-15616",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00328,
      "epss_percentile": 0.25164,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Logto",
      "product": "Logto",
      "cwe": "CWE-308",
      "title": "Local MFA not enforced during SSO sign-in",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15616"
    },
    {
      "rank": 178,
      "cve_id": "CVE-2026-21723",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00327,
      "epss_percentile": 0.25057,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Grafana",
      "product": "Grafana OSS",
      "cwe": "CWE-400",
      "title": "CVE-2026-21723 Record",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21723"
    },
    {
      "rank": 179,
      "cve_id": "CVE-2026-34496",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00326,
      "epss_percentile": 0.24932,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Johnson Controls",
      "product": "victor Web",
      "cwe": "CWE-269",
      "title": "victor Web - Priviledge Escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34496"
    },
    {
      "rank": 180,
      "cve_id": "CVE-2026-65903",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00325,
      "epss_percentile": 0.24758,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-697",
      "title": "DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65903"
    },
    {
      "rank": 181,
      "cve_id": "CVE-2026-64814",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00322,
      "epss_percentile": 0.24399,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-862",
      "title": "In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64814"
    },
    {
      "rank": 182,
      "cve_id": "CVE-2026-9635",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00321,
      "epss_percentile": 0.24287,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mythemeshop",
      "product": "WP Shortcode by MyThemeShop",
      "cwe": "CWE-79",
      "title": "WP Shortcode by MyThemeShop <= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9635"
    },
    {
      "rank": 183,
      "cve_id": "CVE-2026-7534",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00318,
      "epss_percentile": 0.23981,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FantasticPlugins",
      "product": "SUMO Reward Points for WooCommerce",
      "cwe": "CWE-79",
      "title": "SUMO Reward Points for WooCommerce <= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7534"
    },
    {
      "rank": 184,
      "cve_id": "CVE-2026-12421",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00318,
      "epss_percentile": 0.2398,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "ARforms",
      "cwe": "CWE-79",
      "title": "ARforms <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field Values",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12421"
    },
    {
      "rank": 185,
      "cve_id": "CVE-2026-65913",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00318,
      "epss_percentile": 0.23949,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-1321",
      "title": "DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65913"
    },
    {
      "rank": 186,
      "cve_id": "CVE-2026-65758",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00314,
      "epss_percentile": 0.2353,
      "kev": false,
      "kev_due_at": null,
      "vendor": "tassos.gr",
      "product": "Convert Forms extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65758"
    },
    {
      "rank": 187,
      "cve_id": "CVE-2026-64799",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00313,
      "epss_percentile": 0.2345,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Articles Anywhere Pro extension for Joomla",
      "cwe": "CWE-918",
      "title": "Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64799"
    },
    {
      "rank": 188,
      "cve_id": "CVE-2026-25466",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00313,
      "epss_percentile": 0.23432,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WPGMaps",
      "product": "WP Go Maps",
      "cwe": "CWE-862",
      "title": "WordPress WP Go Maps plugin <= 10.1.04 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25466"
    },
    {
      "rank": 189,
      "cve_id": "CVE-2026-65452",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00313,
      "epss_percentile": 0.23431,
      "kev": false,
      "kev_due_at": null,
      "vendor": "motov.net",
      "product": "Ebook Store",
      "cwe": "CWE-862",
      "title": "WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65452"
    },
    {
      "rank": 190,
      "cve_id": "CVE-2026-65485",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00313,
      "epss_percentile": 0.23435,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Daniel Iser",
      "product": "Content Control",
      "cwe": "CWE-862",
      "title": "WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65485"
    },
    {
      "rank": 191,
      "cve_id": "CVE-2026-65486",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00313,
      "epss_percentile": 0.23431,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bastien Ho",
      "product": "Event post",
      "cwe": "CWE-862",
      "title": "WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65486"
    },
    {
      "rank": 192,
      "cve_id": "CVE-2026-65489",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00313,
      "epss_percentile": 0.23434,
      "kev": false,
      "kev_due_at": null,
      "vendor": "LA-Studio",
      "product": "LA-Studio Element Kit for Elementor",
      "cwe": "CWE-862",
      "title": "WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65489"
    },
    {
      "rank": 193,
      "cve_id": "CVE-2026-65501",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00313,
      "epss_percentile": 0.23431,
      "kev": false,
      "kev_due_at": null,
      "vendor": "vendidero",
      "product": "Shiptastic for WooCommerce",
      "cwe": "CWE-639",
      "title": "WordPress Shiptastic for WooCommerce plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65501"
    },
    {
      "rank": 194,
      "cve_id": "CVE-2026-65529",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00313,
      "epss_percentile": 0.23435,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Iqonic Design",
      "product": "Graphina",
      "cwe": "CWE-862",
      "title": "WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65529"
    },
    {
      "rank": 195,
      "cve_id": "CVE-2026-15647",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00311,
      "epss_percentile": 0.23192,
      "kev": false,
      "kev_due_at": null,
      "vendor": "berocket",
      "product": "Brands for WooCommerce",
      "cwe": "CWE-79",
      "title": "Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15647"
    },
    {
      "rank": 196,
      "cve_id": "CVE-2026-57808",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00299,
      "epss_percentile": 0.21948,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Saad Iqbal",
      "product": "WP EasyPay",
      "cwe": "CWE-862",
      "title": "WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57808"
    },
    {
      "rank": 197,
      "cve_id": "CVE-2026-65458",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00295,
      "epss_percentile": 0.2143,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Chouby",
      "product": "Polylang",
      "cwe": "CWE-497",
      "title": "WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65458"
    },
    {
      "rank": 198,
      "cve_id": "CVE-2026-65535",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00295,
      "epss_percentile": 0.21429,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Takayuki Miyauchi",
      "product": "TinyMCE Templates",
      "cwe": "CWE-497",
      "title": "WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65535"
    },
    {
      "rank": 199,
      "cve_id": "CVE-2026-27399",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21352,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WebWizards",
      "product": "MarketKing",
      "cwe": "CWE-862",
      "title": "WordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27399"
    },
    {
      "rank": 200,
      "cve_id": "CVE-2026-27418",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21356,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Epsiloncool",
      "product": "WP Fast Total Search",
      "cwe": "CWE-862",
      "title": "WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27418"
    },
    {
      "rank": 201,
      "cve_id": "CVE-2026-27422",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21353,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bPlugins",
      "product": "YT Player",
      "cwe": "CWE-862",
      "title": "WordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27422"
    },
    {
      "rank": 202,
      "cve_id": "CVE-2026-61972",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21355,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WooLentor",
      "product": "ShopLentor Pro",
      "cwe": "CWE-862",
      "title": "WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61972"
    },
    {
      "rank": 203,
      "cve_id": "CVE-2026-65453",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21352,
      "kev": false,
      "kev_due_at": null,
      "vendor": "motov.net",
      "product": "Ebook Store",
      "cwe": "CWE-862",
      "title": "WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65453"
    },
    {
      "rank": 204,
      "cve_id": "CVE-2026-65468",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21358,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Crocoblock. Jetimpex Inc.",
      "product": "JetBooking",
      "cwe": "CWE-862",
      "title": "WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65468"
    },
    {
      "rank": 205,
      "cve_id": "CVE-2026-65469",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21356,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Strategy11 Team",
      "product": "AWP Classifieds",
      "cwe": "CWE-862",
      "title": "WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65469"
    },
    {
      "rank": 206,
      "cve_id": "CVE-2026-65472",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21356,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Kit",
      "product": "Kit (formerly ConvertKit)",
      "cwe": "CWE-862",
      "title": "WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65472"
    },
    {
      "rank": 207,
      "cve_id": "CVE-2026-65476",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21354,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uxper",
      "product": "Civi",
      "cwe": "CWE-862",
      "title": "WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65476"
    },
    {
      "rank": 208,
      "cve_id": "CVE-2026-65487",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21355,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ThemeGoods",
      "product": "Photography",
      "cwe": "CWE-862",
      "title": "WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65487"
    },
    {
      "rank": 209,
      "cve_id": "CVE-2026-65506",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21351,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sonaar",
      "product": "MP3 Audio Player for Music, Radio & Podcast by Sonaar",
      "cwe": "CWE-862",
      "title": "WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65506"
    },
    {
      "rank": 210,
      "cve_id": "CVE-2026-65525",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21354,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uxper",
      "product": "Civi Framework",
      "cwe": "CWE-862",
      "title": "WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65525"
    },
    {
      "rank": 211,
      "cve_id": "CVE-2026-10697",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00292,
      "epss_percentile": 0.21147,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progress",
      "product": "MOVEit Transfer",
      "cwe": "CWE-287",
      "title": "MFA Bypass in MOVEit Transfer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10697"
    },
    {
      "rank": 212,
      "cve_id": "CVE-2026-65703",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00292,
      "epss_percentile": 0.21115,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-787",
      "title": "FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65703"
    },
    {
      "rank": 213,
      "cve_id": "CVE-2026-64874",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0029,
      "epss_percentile": 0.20946,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Cache Cleaner Pro extension for Joomla",
      "cwe": "CWE-200",
      "title": "Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64874"
    },
    {
      "rank": 214,
      "cve_id": "CVE-2026-65604",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.0029,
      "epss_percentile": 0.20951,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zalando",
      "product": "skipper",
      "cwe": "CWE-20",
      "title": "Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65604"
    },
    {
      "rank": 215,
      "cve_id": "CVE-2026-25427",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00287,
      "epss_percentile": 0.20662,
      "kev": false,
      "kev_due_at": null,
      "vendor": "DigitalME",
      "product": "eRoom",
      "cwe": "CWE-862",
      "title": "WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25427"
    },
    {
      "rank": 216,
      "cve_id": "CVE-2026-27391",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00287,
      "epss_percentile": 0.20662,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Stylemix",
      "product": "uListing",
      "cwe": "CWE-862",
      "title": "WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27391"
    },
    {
      "rank": 217,
      "cve_id": "CVE-2026-65463",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00287,
      "epss_percentile": 0.20665,
      "kev": false,
      "kev_due_at": null,
      "vendor": "masteriyo",
      "product": "Masteriyo - LMS",
      "cwe": "CWE-639",
      "title": "WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65463"
    },
    {
      "rank": 218,
      "cve_id": "CVE-2026-65479",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00287,
      "epss_percentile": 0.20662,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MVP Themes",
      "product": "Reviewer",
      "cwe": "CWE-862",
      "title": "WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65479"
    },
    {
      "rank": 219,
      "cve_id": "CVE-2026-65494",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00286,
      "epss_percentile": 0.20499,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dokan",
      "product": "Dokan Pro",
      "cwe": "CWE-89",
      "title": "WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65494"
    },
    {
      "rank": 220,
      "cve_id": "CVE-2026-61948",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00283,
      "epss_percentile": 0.20235,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Shahjada",
      "product": "WPDM – Premium Packages",
      "cwe": "CWE-89",
      "title": "WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61948"
    },
    {
      "rank": 221,
      "cve_id": "CVE-2026-61946",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00283,
      "epss_percentile": 0.20199,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Easy Appointments",
      "product": "Easy Appointments",
      "cwe": "CWE-639",
      "title": "WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61946"
    },
    {
      "rank": 222,
      "cve_id": "CVE-2026-61943",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00278,
      "epss_percentile": 0.19733,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Shahjada",
      "product": "WPDM – Premium Packages",
      "cwe": "CWE-862",
      "title": "WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61943"
    },
    {
      "rank": 223,
      "cve_id": "CVE-2026-65699",
      "cvss_base": 2.3,
      "cvss_severity": "LOW",
      "epss_score": 0.00276,
      "epss_percentile": 0.19417,
      "kev": false,
      "kev_due_at": null,
      "vendor": "reworkd",
      "product": "AgentGPT",
      "cwe": "CWE-639",
      "title": "AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65699"
    },
    {
      "rank": 224,
      "cve_id": "CVE-2026-48012",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00275,
      "epss_percentile": 0.19333,
      "kev": false,
      "kev_due_at": null,
      "vendor": "shopware",
      "product": "shopware",
      "cwe": "CWE-601",
      "title": "Shopware SSO referer trust leading to an arbitrary redirect target",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48012"
    },
    {
      "rank": 225,
      "cve_id": "CVE-2026-65697",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00273,
      "epss_percentile": 0.19094,
      "kev": false,
      "kev_due_at": null,
      "vendor": "usefathom",
      "product": "fathom",
      "cwe": "CWE-79",
      "title": "Fathom Lite 1.3.1 Stored XSS via /collect Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65697"
    },
    {
      "rank": 226,
      "cve_id": "CVE-2026-65456",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0027,
      "epss_percentile": 0.18687,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PickPlugins",
      "product": "Product Slider for WooCommerce",
      "cwe": "CWE-639",
      "title": "WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65456"
    },
    {
      "rank": 227,
      "cve_id": "CVE-2026-65491",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0027,
      "epss_percentile": 0.18685,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Jonathan Daggerhart",
      "product": "Query Wrangler",
      "cwe": "CWE-862",
      "title": "WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65491"
    },
    {
      "rank": 228,
      "cve_id": "CVE-2026-65524",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0027,
      "epss_percentile": 0.18686,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ThemeFusion",
      "product": "Avada Custom Branding",
      "cwe": "CWE-862",
      "title": "WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65524"
    },
    {
      "rank": 229,
      "cve_id": "CVE-2026-65530",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0027,
      "epss_percentile": 0.18686,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Templatespare",
      "product": "TemplateSpare",
      "cwe": "CWE-862",
      "title": "WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65530"
    },
    {
      "rank": 230,
      "cve_id": "CVE-2026-50103",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00269,
      "epss_percentile": 0.18526,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MZ Automation",
      "product": "libIEC61850",
      "cwe": "CWE-228",
      "title": "Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50103"
    },
    {
      "rank": 231,
      "cve_id": "CVE-2026-64873",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00268,
      "epss_percentile": 0.18478,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Cache Cleaner Pro extension for Joomla",
      "cwe": "CWE-918",
      "title": "Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64873"
    },
    {
      "rank": 232,
      "cve_id": "CVE-2026-65516",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00266,
      "epss_percentile": 0.18069,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pepro Dev. Group",
      "product": "PeproDev Ultimate Invoice",
      "cwe": "CWE-918",
      "title": "WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65516"
    },
    {
      "rank": 233,
      "cve_id": "CVE-2026-65499",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00266,
      "epss_percentile": 0.18067,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pepro Dev. Group",
      "product": "PeproDev Ultimate Invoice",
      "cwe": "CWE-862",
      "title": "WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65499"
    },
    {
      "rank": 234,
      "cve_id": "CVE-2026-65899",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00266,
      "epss_percentile": 0.18305,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-693",
      "title": "DOMPurify before 3.4.9 Trusted Types Policy State Contamination",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65899"
    },
    {
      "rank": 235,
      "cve_id": "CVE-2026-60122",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00265,
      "epss_percentile": 0.17929,
      "kev": false,
      "kev_due_at": null,
      "vendor": "gpsd",
      "product": "gpsd",
      "cwe": "CWE-94",
      "title": "gpsd gpsprof Code Injection via SKY.satellites used Field",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60122"
    },
    {
      "rank": 236,
      "cve_id": "CVE-2026-15037",
      "cvss_base": 2.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00262,
      "epss_percentile": 0.17604,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Qt",
      "product": "Qt",
      "cwe": "CWE-91",
      "title": "XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15037"
    },
    {
      "rank": 237,
      "cve_id": "CVE-2026-57703",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0026,
      "epss_percentile": 0.17335,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sunshinephotocart",
      "product": "Sunshine Photo Cart",
      "cwe": "CWE-862",
      "title": "WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57703"
    },
    {
      "rank": 238,
      "cve_id": "CVE-2026-65484",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0026,
      "epss_percentile": 0.17335,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AnalogWP",
      "product": "Style Kits",
      "cwe": "CWE-862",
      "title": "WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65484"
    },
    {
      "rank": 239,
      "cve_id": "CVE-2026-65696",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0026,
      "epss_percentile": 0.17281,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sct",
      "product": "overseerr",
      "cwe": "CWE-639",
      "title": "Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65696"
    },
    {
      "rank": 240,
      "cve_id": "CVE-2026-25424",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.16623,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mediavine",
      "product": "Mediavine Control Panel",
      "cwe": "CWE-862",
      "title": "WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25424"
    },
    {
      "rank": 241,
      "cve_id": "CVE-2026-27392",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.16622,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Stylemix",
      "product": "uListing",
      "cwe": "CWE-862",
      "title": "WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27392"
    },
    {
      "rank": 242,
      "cve_id": "CVE-2026-27423",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.16624,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roland Barker",
      "product": "Participants Database",
      "cwe": "CWE-862",
      "title": "WordPress Participants Database plugin <= 2.7.8.4 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27423"
    },
    {
      "rank": 243,
      "cve_id": "CVE-2026-61973",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.1662,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WooLentor",
      "product": "ShopLentor Pro",
      "cwe": "CWE-862",
      "title": "WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61973"
    },
    {
      "rank": 244,
      "cve_id": "CVE-2026-65457",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.1662,
      "kev": false,
      "kev_due_at": null,
      "vendor": "yoomoney",
      "product": "ЮKassa для WooCommerce",
      "cwe": "CWE-862",
      "title": "WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65457"
    },
    {
      "rank": 245,
      "cve_id": "CVE-2026-65537",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.16621,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Themeisle",
      "product": "Cyr to Lat reloaded – transliteration of links and file names",
      "cwe": "CWE-862",
      "title": "WordPress Cyr to Lat reloaded – transliteration of links and file names plugin <= 1.3.3 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65537"
    },
    {
      "rank": 246,
      "cve_id": "CVE-2026-9066",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00253,
      "epss_percentile": 0.16445,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "WP Compress",
      "cwe": "CWE-79",
      "title": "WP Compress < 7.10.04 - Reflected XSS via test_zone",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9066"
    },
    {
      "rank": 247,
      "cve_id": "CVE-2026-65756",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00253,
      "epss_percentile": 0.16447,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Keyboard Shortcuts extension for Joomla",
      "cwe": "CWE-79",
      "title": "Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65756"
    },
    {
      "rank": 248,
      "cve_id": "CVE-2026-57370",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16266,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CODEPRESS IT Solutions LLC",
      "product": "Visitor Traffic Real Time Statistics Pro",
      "cwe": "CWE-79",
      "title": "WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.9.1 - Reflected Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57370"
    },
    {
      "rank": 249,
      "cve_id": "CVE-2026-57374",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16249,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Wisetr INC.",
      "product": "Funnel Kit Funnel Builder PRO",
      "cwe": "CWE-79",
      "title": "WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57374"
    },
    {
      "rank": 250,
      "cve_id": "CVE-2026-57397",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16251,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ThimPress.",
      "product": "Coaching",
      "cwe": "CWE-79",
      "title": "WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57397"
    },
    {
      "rank": 251,
      "cve_id": "CVE-2026-57427",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16244,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Download Monitor",
      "product": "Download Monitor - WPForms Lock",
      "cwe": "CWE-79",
      "title": "WordPress Download Monitor - WPForms Lock plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57427"
    },
    {
      "rank": 252,
      "cve_id": "CVE-2026-57428",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16247,
      "kev": false,
      "kev_due_at": null,
      "vendor": "BoldGrid",
      "product": "Sprout Clients",
      "cwe": "CWE-79",
      "title": "WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57428"
    },
    {
      "rank": 253,
      "cve_id": "CVE-2026-57699",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16271,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bqworks",
      "product": "Slider Pro",
      "cwe": "CWE-79",
      "title": "WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57699"
    },
    {
      "rank": 254,
      "cve_id": "CVE-2026-57701",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16263,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WebCodingPlace",
      "product": "Real Estate Manager Pro",
      "cwe": "CWE-79",
      "title": "WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57701"
    },
    {
      "rank": 255,
      "cve_id": "CVE-2026-57704",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16275,
      "kev": false,
      "kev_due_at": null,
      "vendor": "StoreApps",
      "product": "Smart Manager",
      "cwe": "CWE-79",
      "title": "WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57704"
    },
    {
      "rank": 256,
      "cve_id": "CVE-2026-57735",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16257,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Soflyy",
      "product": "Breakdance",
      "cwe": "CWE-79",
      "title": "WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57735"
    },
    {
      "rank": 257,
      "cve_id": "CVE-2026-57767",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16269,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CodeCabin.io",
      "product": "WP Google Maps Pro",
      "cwe": "CWE-79",
      "title": "WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57767"
    },
    {
      "rank": 258,
      "cve_id": "CVE-2026-57769",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16271,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ThemeGoods",
      "product": "Grand Photography",
      "cwe": "CWE-79",
      "title": "WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57769"
    },
    {
      "rank": 259,
      "cve_id": "CVE-2026-57809",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16251,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AffiliateWP",
      "product": "AffiliateWP",
      "cwe": "CWE-79",
      "title": "WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57809"
    },
    {
      "rank": 260,
      "cve_id": "CVE-2026-59512",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16261,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PI Web Solution",
      "product": "Product Enquiry for WooCommerce",
      "cwe": "CWE-79",
      "title": "WordPress Product Enquiry for WooCommerce plugin <= 2.2.34.43 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59512"
    },
    {
      "rank": 261,
      "cve_id": "CVE-2026-59517",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16261,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hassantafreshi",
      "product": "Easy Form Builder",
      "cwe": "CWE-79",
      "title": "WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59517"
    },
    {
      "rank": 262,
      "cve_id": "CVE-2026-61944",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16269,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bookly",
      "product": "Bookly",
      "cwe": "CWE-79",
      "title": "WordPress Bookly plugin <= 27.7 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61944"
    },
    {
      "rank": 263,
      "cve_id": "CVE-2026-61947",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.1627,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WPVibes",
      "product": "Form Vibes – Database Manager for Forms",
      "cwe": "CWE-79",
      "title": "WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61947"
    },
    {
      "rank": 264,
      "cve_id": "CVE-2026-65492",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16277,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dokan WordPress Plugin",
      "product": "Dokan Pro",
      "cwe": "CWE-79",
      "title": "WordPress Dokan Pro plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65492"
    },
    {
      "rank": 265,
      "cve_id": "CVE-2026-65510",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16268,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pepro Dev. Group",
      "product": "PeproDev Ultimate Invoice",
      "cwe": "CWE-79",
      "title": "WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65510"
    },
    {
      "rank": 266,
      "cve_id": "CVE-2026-65511",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00251,
      "epss_percentile": 0.16269,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pixelacehq",
      "product": "Manual - Documentation, Knowledge Base & Education WordPress Theme",
      "cwe": "CWE-79",
      "title": "WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65511"
    },
    {
      "rank": 267,
      "cve_id": "CVE-2026-15630",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00246,
      "epss_percentile": 0.15636,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Casdoor",
      "product": "Casdoor",
      "cwe": "CWE-269",
      "title": "CVE-2026-15630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15630"
    },
    {
      "rank": 268,
      "cve_id": "CVE-2026-65430",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00245,
      "epss_percentile": 0.15471,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "GeoIP extension for Joomla",
      "cwe": "CWE-200",
      "title": "Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65430"
    },
    {
      "rank": 269,
      "cve_id": "CVE-2026-65755",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00245,
      "epss_percentile": 0.1547,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Articles Anywhere extension for Joomla",
      "cwe": "CWE-524",
      "title": "Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65755"
    },
    {
      "rank": 270,
      "cve_id": "CVE-2026-9577",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00242,
      "epss_percentile": 0.15091,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Post Status Notifier Lite",
      "cwe": "CWE-79",
      "title": "Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9577"
    },
    {
      "rank": 271,
      "cve_id": "CVE-2025-68081",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14914,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Lester Chan",
      "product": "WP-Polls",
      "cwe": "CWE-79",
      "title": "WordPress WP-Polls plugin <= 2.77.3 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68081"
    },
    {
      "rank": 272,
      "cve_id": "CVE-2026-24628",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14912,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Supsystic",
      "product": "Photo Gallery by Supsystic",
      "cwe": "CWE-79",
      "title": "WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24628"
    },
    {
      "rank": 273,
      "cve_id": "CVE-2026-65483",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14912,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hashthemes",
      "product": "HashThemes Demo Importer",
      "cwe": "CWE-79",
      "title": "WordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65483"
    },
    {
      "rank": 274,
      "cve_id": "CVE-2026-65534",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14911,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Charlie Etienne",
      "product": "Custom links in Elementor Image Carousel",
      "cwe": "CWE-79",
      "title": "WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65534"
    },
    {
      "rank": 275,
      "cve_id": "CVE-2026-65538",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14912,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Nilo Velez",
      "product": "Machete",
      "cwe": "CWE-79",
      "title": "WordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65538"
    },
    {
      "rank": 276,
      "cve_id": "CVE-2026-65550",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14913,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wpshopmart",
      "product": "Tabs",
      "cwe": "CWE-79",
      "title": "WordPress Tabs plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65550"
    },
    {
      "rank": 277,
      "cve_id": "CVE-2026-65902",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00237,
      "epss_percentile": 0.14515,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-501",
      "title": "DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65902"
    },
    {
      "rank": 278,
      "cve_id": "CVE-2026-11804",
      "cvss_base": 5.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00236,
      "epss_percentile": 0.14347,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tridium",
      "product": "Niagara Framework",
      "cwe": "CWE-280",
      "title": "Program Module Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11804"
    },
    {
      "rank": 279,
      "cve_id": "CVE-2026-48530",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.14162,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48530"
    },
    {
      "rank": 280,
      "cve_id": "CVE-2026-48531",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.1416,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48531"
    },
    {
      "rank": 281,
      "cve_id": "CVE-2026-48532",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.14162,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48532"
    },
    {
      "rank": 282,
      "cve_id": "CVE-2026-48534",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.14161,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48534"
    },
    {
      "rank": 283,
      "cve_id": "CVE-2026-48535",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.14162,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48535"
    },
    {
      "rank": 284,
      "cve_id": "CVE-2026-48536",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.1416,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48536"
    },
    {
      "rank": 285,
      "cve_id": "CVE-2026-48537",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.1416,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48537"
    },
    {
      "rank": 286,
      "cve_id": "CVE-2026-48538",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.1416,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48538"
    },
    {
      "rank": 287,
      "cve_id": "CVE-2026-48539",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00235,
      "epss_percentile": 0.14161,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GFI Software",
      "product": "GFI Archiver",
      "cwe": "CWE-79",
      "title": "GFI Archiver < 15.13 Stored XSS via MailInsights.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48539"
    },
    {
      "rank": 288,
      "cve_id": "CVE-2026-65911",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00233,
      "epss_percentile": 0.13905,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-79",
      "title": "DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65911"
    },
    {
      "rank": 289,
      "cve_id": "CVE-2026-15614",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.0023,
      "epss_percentile": 0.13535,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Logto",
      "product": "Logto",
      "cwe": "CWE-294",
      "title": "IdP-initiated SAML sessions not reliably invalidated (replay)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15614"
    },
    {
      "rank": 290,
      "cve_id": "CVE-2026-65478",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0023,
      "epss_percentile": 0.13611,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CridioStudio",
      "product": "ListingPro",
      "cwe": "CWE-862",
      "title": "WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65478"
    },
    {
      "rank": 291,
      "cve_id": "CVE-2026-59514",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00229,
      "epss_percentile": 0.13526,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MightyNetworks vs BuddyBoss",
      "product": "Buddyboss Platform",
      "cwe": "CWE-89",
      "title": "WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59514"
    },
    {
      "rank": 292,
      "cve_id": "CVE-2026-16584",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00227,
      "epss_percentile": 0.13177,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AWS",
      "product": "aws-api-mcp-server",
      "cwe": "CWE-455",
      "title": "AWS API MCP Server Security Policy Bypass via Startup Failure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16584"
    },
    {
      "rank": 293,
      "cve_id": "CVE-2026-27403",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12883,
      "kev": false,
      "kev_due_at": null,
      "vendor": "NerdPress",
      "product": "Hubbub Lite",
      "cwe": "CWE-79",
      "title": "WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27403"
    },
    {
      "rank": 294,
      "cve_id": "CVE-2026-57373",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12885,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Wisetr INC.",
      "product": "Funnel Kit Funnel Builder PRO",
      "cwe": "CWE-79",
      "title": "WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.4 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57373"
    },
    {
      "rank": 295,
      "cve_id": "CVE-2026-57384",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12883,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Membership Software",
      "product": "WishList Member X",
      "cwe": "CWE-79",
      "title": "WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57384"
    },
    {
      "rank": 296,
      "cve_id": "CVE-2026-59513",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12876,
      "kev": false,
      "kev_due_at": null,
      "vendor": "masteriyo",
      "product": "Masteriyo - LMS",
      "cwe": "CWE-79",
      "title": "WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59513"
    },
    {
      "rank": 297,
      "cve_id": "CVE-2026-64872",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.1277,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Cache Cleaner Pro extension for Joomla",
      "cwe": "CWE-22",
      "title": "Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64872"
    },
    {
      "rank": 298,
      "cve_id": "CVE-2026-65449",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12877,
      "kev": false,
      "kev_due_at": null,
      "vendor": "RomanCode",
      "product": "MapSVG",
      "cwe": "CWE-79",
      "title": "WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65449"
    },
    {
      "rank": 299,
      "cve_id": "CVE-2026-65465",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12884,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Crocoblock. Jetimpex Inc.",
      "product": "JetElements For Elementor",
      "cwe": "CWE-79",
      "title": "WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65465"
    },
    {
      "rank": 300,
      "cve_id": "CVE-2026-65470",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12876,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WPManageNinja",
      "product": "Fluent Support",
      "cwe": "CWE-79",
      "title": "WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65470"
    },
    {
      "rank": 301,
      "cve_id": "CVE-2026-65473",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12878,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Nexcess",
      "product": "Virtue/Ascend/Pinnacle Toolkit",
      "cwe": "CWE-79",
      "title": "WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65473"
    },
    {
      "rank": 302,
      "cve_id": "CVE-2026-65475",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12887,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WP Chill",
      "product": "Modula Image Gallery",
      "cwe": "CWE-79",
      "title": "WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65475"
    },
    {
      "rank": 303,
      "cve_id": "CVE-2026-65480",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12877,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CodexThemes",
      "product": "TheGem",
      "cwe": "CWE-79",
      "title": "WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65480"
    },
    {
      "rank": 304,
      "cve_id": "CVE-2026-65482",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12876,
      "kev": false,
      "kev_due_at": null,
      "vendor": "LA-Studio",
      "product": "LA-Studio Element Kit for Elementor",
      "cwe": "CWE-79",
      "title": "WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65482"
    },
    {
      "rank": 305,
      "cve_id": "CVE-2026-65503",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12878,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bdthemes",
      "product": "Ultimate Store Kit Elementor Addons",
      "cwe": "CWE-79",
      "title": "WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65503"
    },
    {
      "rank": 306,
      "cve_id": "CVE-2026-65514",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12879,
      "kev": false,
      "kev_due_at": null,
      "vendor": "codepeople",
      "product": "Appointment Hour Booking",
      "cwe": "CWE-79",
      "title": "WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65514"
    },
    {
      "rank": 307,
      "cve_id": "CVE-2026-65518",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12881,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Scott Paterson",
      "product": "Accept Donations with PayPal & Stripe",
      "cwe": "CWE-79",
      "title": "WordPress Accept Donations with PayPal & Stripe plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65518"
    },
    {
      "rank": 308,
      "cve_id": "CVE-2026-65519",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12882,
      "kev": false,
      "kev_due_at": null,
      "vendor": "gt3themes",
      "product": "Photo Gallery",
      "cwe": "CWE-79",
      "title": "WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65519"
    },
    {
      "rank": 309,
      "cve_id": "CVE-2026-65522",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.1288,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pixelacehq",
      "product": "Manual - Documentation, Knowledge Base & Education WordPress Theme",
      "cwe": "CWE-79",
      "title": "WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65522"
    },
    {
      "rank": 310,
      "cve_id": "CVE-2026-65527",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12882,
      "kev": false,
      "kev_due_at": null,
      "vendor": "lqd",
      "product": "LIQUID SPEECH BALLOON",
      "cwe": "CWE-79",
      "title": "WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65527"
    },
    {
      "rank": 311,
      "cve_id": "CVE-2026-65528",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12882,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bannersky",
      "product": "BSK PDF Manager",
      "cwe": "CWE-79",
      "title": "WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65528"
    },
    {
      "rank": 312,
      "cve_id": "CVE-2026-65533",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12875,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wbolt.com",
      "product": "Smart SEO Tool",
      "cwe": "CWE-79",
      "title": "WordPress Smart SEO Tool plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65533"
    },
    {
      "rank": 313,
      "cve_id": "CVE-2026-65713",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12769,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Modals Pro extension for Joomla",
      "cwe": "CWE-22",
      "title": "Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65713"
    },
    {
      "rank": 314,
      "cve_id": "CVE-2026-65531",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00217,
      "epss_percentile": 0.11985,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Themeum",
      "product": "Qubely",
      "cwe": "CWE-862",
      "title": "WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65531"
    },
    {
      "rank": 315,
      "cve_id": "CVE-2026-64875",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00214,
      "epss_percentile": 0.11647,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "GeoIP extension for Joomla",
      "cwe": "CWE-290",
      "title": "Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64875"
    },
    {
      "rank": 316,
      "cve_id": "CVE-2026-65898",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00212,
      "epss_percentile": 0.11363,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-79",
      "title": "DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65898"
    },
    {
      "rank": 317,
      "cve_id": "CVE-2026-64802",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00211,
      "epss_percentile": 0.11208,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "GoLand",
      "cwe": "CWE-94",
      "title": "In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64802"
    },
    {
      "rank": 318,
      "cve_id": "CVE-2026-64803",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00211,
      "epss_percentile": 0.11209,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "GoLand",
      "cwe": "CWE-94",
      "title": "In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64803"
    },
    {
      "rank": 319,
      "cve_id": "CVE-2026-65900",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00209,
      "epss_percentile": 0.10896,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-79",
      "title": "DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65900"
    },
    {
      "rank": 320,
      "cve_id": "CVE-2026-24639",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00208,
      "epss_percentile": 0.10788,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Ronald Huereca",
      "product": "Photo Block",
      "cwe": "CWE-918",
      "title": "WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24639"
    },
    {
      "rank": 321,
      "cve_id": "CVE-2026-65496",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00208,
      "epss_percentile": 0.10787,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Complianz",
      "product": "Complianz",
      "cwe": "CWE-918",
      "title": "WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65496"
    },
    {
      "rank": 322,
      "cve_id": "CVE-2026-65914",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00207,
      "epss_percentile": 0.1066,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-79",
      "title": "DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65914"
    },
    {
      "rank": 323,
      "cve_id": "CVE-2026-65904",
      "cvss_base": 2.3,
      "cvss_severity": "LOW",
      "epss_score": 0.00206,
      "epss_percentile": 0.10469,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-754",
      "title": "DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65904"
    },
    {
      "rank": 324,
      "cve_id": "CVE-2026-15966",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00204,
      "epss_percentile": 0.1029,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progress",
      "product": "MOVEit Transfer",
      "cwe": "CWE-942",
      "title": "Improper CORS handling in MOVEit Transfer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15966"
    },
    {
      "rank": 325,
      "cve_id": "CVE-2026-15967",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00204,
      "epss_percentile": 0.10261,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progress",
      "product": "MOVEit Transfer",
      "cwe": "CWE-613",
      "title": "MOVEit Transfer refresh-token processing does not enforce updated account restrictions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15967"
    },
    {
      "rank": 326,
      "cve_id": "CVE-2026-57784",
      "cvss_base": 9.6,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00201,
      "epss_percentile": 0.09846,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Ninja Forms",
      "product": "Ninja Forms File Uploads Extension",
      "cwe": "CWE-352",
      "title": "WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57784"
    },
    {
      "rank": 327,
      "cve_id": "CVE-2026-65471",
      "cvss_base": 9.6,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00201,
      "epss_percentile": 0.09847,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Avada Studio",
      "product": "Avada Core",
      "cwe": "CWE-352",
      "title": "WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65471"
    },
    {
      "rank": 328,
      "cve_id": "CVE-2026-57785",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00201,
      "epss_percentile": 0.09847,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ApusTheme",
      "product": "ApusListing",
      "cwe": "CWE-352",
      "title": "WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57785"
    },
    {
      "rank": 329,
      "cve_id": "CVE-2026-64804",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00192,
      "epss_percentile": 0.08824,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "WebStorm",
      "cwe": "CWE-829",
      "title": "In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64804"
    },
    {
      "rank": 330,
      "cve_id": "CVE-2026-64805",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00192,
      "epss_percentile": 0.08824,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "WebStorm",
      "cwe": "CWE-829",
      "title": "In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64805"
    },
    {
      "rank": 331,
      "cve_id": "CVE-2026-64806",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00192,
      "epss_percentile": 0.08825,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "WebStorm",
      "cwe": "CWE-829",
      "title": "In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64806"
    },
    {
      "rank": 332,
      "cve_id": "CVE-2026-64808",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00192,
      "epss_percentile": 0.08824,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "PhpStorm",
      "cwe": "CWE-829",
      "title": "In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64808"
    },
    {
      "rank": 333,
      "cve_id": "CVE-2026-64809",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00192,
      "epss_percentile": 0.08825,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "PhpStorm",
      "cwe": "CWE-829",
      "title": "In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64809"
    },
    {
      "rank": 334,
      "cve_id": "CVE-2026-65901",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00192,
      "epss_percentile": 0.0888,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-79",
      "title": "DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65901"
    },
    {
      "rank": 335,
      "cve_id": "CVE-2026-65466",
      "cvss_base": 4.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00188,
      "epss_percentile": 0.08388,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Crocoblock. Jetimpex Inc.",
      "product": "JetBooking",
      "cwe": "CWE-918",
      "title": "WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65466"
    },
    {
      "rank": 336,
      "cve_id": "CVE-2026-65467",
      "cvss_base": 4.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00188,
      "epss_percentile": 0.08388,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Crocoblock. Jetimpex Inc.",
      "product": "JetEngine",
      "cwe": "CWE-918",
      "title": "WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65467"
    },
    {
      "rank": 337,
      "cve_id": "CVE-2026-65706",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00187,
      "epss_percentile": 0.08321,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-131",
      "title": "FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65706"
    },
    {
      "rank": 338,
      "cve_id": "CVE-2026-65705",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00187,
      "epss_percentile": 0.08321,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-131",
      "title": "FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65705"
    },
    {
      "rank": 339,
      "cve_id": "CVE-2026-65908",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00185,
      "epss_percentile": 0.08099,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "PyCharm",
      "cwe": "CWE-829",
      "title": "In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65908"
    },
    {
      "rank": 340,
      "cve_id": "CVE-2026-38764",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00185,
      "epss_percentile": 0.08107,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-269",
      "title": "An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-38764"
    },
    {
      "rank": 341,
      "cve_id": "CVE-2026-64807",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00185,
      "epss_percentile": 0.08098,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "WebStorm",
      "cwe": "CWE-829",
      "title": "In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64807"
    },
    {
      "rank": 342,
      "cve_id": "CVE-2026-15612",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00182,
      "epss_percentile": 0.07778,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Logto",
      "product": "Logto",
      "cwe": "CWE-345",
      "title": "LOIDC nonce validation bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15612"
    },
    {
      "rank": 343,
      "cve_id": "CVE-2026-15615",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00182,
      "epss_percentile": 0.07824,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Logto",
      "product": "Logto",
      "cwe": "CWE-345",
      "title": "SAML <Conditions> element not validated",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15615"
    },
    {
      "rank": 344,
      "cve_id": "CVE-2026-15968",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00181,
      "epss_percentile": 0.07705,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progress",
      "product": "MOVEit Transfer",
      "cwe": "CWE-79",
      "title": "Stored XSS vulnerability in MOVEit Transfer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15968"
    },
    {
      "rank": 345,
      "cve_id": "CVE-2026-64785",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00181,
      "epss_percentile": 0.0763,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "swift-nio-http2",
      "cwe": "CWE-444",
      "title": "SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. This vulnerability is addressed in swift-nio-http2 version 1.45.0.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64785"
    },
    {
      "rank": 346,
      "cve_id": "CVE-2026-65704",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00178,
      "epss_percentile": 0.07392,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-191",
      "title": "FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65704"
    },
    {
      "rank": 347,
      "cve_id": "CVE-2026-65912",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00175,
      "epss_percentile": 0.06949,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cure53",
      "product": "DOMPurify",
      "cwe": "CWE-79",
      "title": "DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65912"
    },
    {
      "rank": 348,
      "cve_id": "CVE-2026-65010",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00173,
      "epss_percentile": 0.06723,
      "kev": false,
      "kev_due_at": null,
      "vendor": "huggingface",
      "product": "datasets",
      "cwe": "CWE-61",
      "title": "Datasets Symlink-following Arbitrary File Write via Extractor.extract()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65010"
    },
    {
      "rank": 349,
      "cve_id": "CVE-2026-65536",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00167,
      "epss_percentile": 0.06126,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mahdi Yousefi",
      "product": "افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری)",
      "cwe": "CWE-352",
      "title": "WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65536"
    },
    {
      "rank": 350,
      "cve_id": "CVE-2026-59678",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00158,
      "epss_percentile": 0.05186,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux-Gaming",
      "product": "PortProtonQt",
      "cwe": "CWE-863",
      "title": "portprotonqt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59678"
    },
    {
      "rank": 351,
      "cve_id": "CVE-2026-15212",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00157,
      "epss_percentile": 0.05062,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wpo365",
      "product": "WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)",
      "cwe": "CWE-352",
      "title": "WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15212"
    },
    {
      "rank": 352,
      "cve_id": "CVE-2026-6390",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00154,
      "epss_percentile": 0.04773,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Enterprise Linux 10",
      "cwe": "CWE-134",
      "title": "Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6390"
    },
    {
      "rank": 353,
      "cve_id": "CVE-2026-39155",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0015,
      "epss_percentile": 0.04416,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-345",
      "title": "Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to synthesize negative answers for legitimate names and causing resolver-side denial of service.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39155"
    },
    {
      "rank": 354,
      "cve_id": "CVE-2026-64810",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00149,
      "epss_percentile": 0.04305,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-79",
      "title": "In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64810"
    },
    {
      "rank": 355,
      "cve_id": "CVE-2026-65712",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00145,
      "epss_percentile": 0.04013,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "CDN for Joomla Pro extension for Joomla",
      "cwe": "CWE-22",
      "title": "Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65712"
    },
    {
      "rank": 356,
      "cve_id": "CVE-2026-65512",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00143,
      "epss_percentile": 0.03811,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Melapress",
      "product": "WP Activity Log",
      "cwe": "CWE-352",
      "title": "WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65512"
    },
    {
      "rank": 357,
      "cve_id": "CVE-2026-52684",
      "cvss_base": 3.7,
      "cvss_severity": "LOW",
      "epss_score": 0.00143,
      "epss_percentile": 0.03822,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PowerDNS",
      "product": "Recursor",
      "cwe": null,
      "title": "Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52684"
    },
    {
      "rank": 358,
      "cve_id": "CVE-2026-24537",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00142,
      "epss_percentile": 0.03711,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Alex Volkov",
      "product": "WP Accessibility Helper (WAH)",
      "cwe": "CWE-352",
      "title": "WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24537"
    },
    {
      "rank": 359,
      "cve_id": "CVE-2026-65460",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00142,
      "epss_percentile": 0.03713,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zarinpal",
      "product": "Zarinpal Gateway",
      "cwe": "CWE-352",
      "title": "WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65460"
    },
    {
      "rank": 360,
      "cve_id": "CVE-2026-59677",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0014,
      "epss_percentile": 0.03539,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SELinuxProject",
      "product": "selinux",
      "cwe": "CWE-862",
      "title": "Process Kill Attack Vector in killall() in seunshare",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59677"
    },
    {
      "rank": 361,
      "cve_id": "CVE-2026-61981",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00138,
      "epss_percentile": 0.03369,
      "kev": false,
      "kev_due_at": null,
      "vendor": "QuantumCloud",
      "product": "Simple Link Directory Pro",
      "cwe": "CWE-352",
      "title": "WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61981"
    },
    {
      "rank": 362,
      "cve_id": "CVE-2026-65464",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00138,
      "epss_percentile": 0.0337,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Nexcess",
      "product": "GiveWP",
      "cwe": "CWE-352",
      "title": "WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65464"
    },
    {
      "rank": 363,
      "cve_id": "CVE-2026-65757",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0013,
      "epss_percentile": 0.02879,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Modules Anywhere extension for Joomla",
      "cwe": "CWE-352",
      "title": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65757"
    },
    {
      "rank": 364,
      "cve_id": "CVE-2026-50044",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00129,
      "epss_percentile": 0.02765,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Pronetiqs",
      "product": "Panduit Intravue",
      "cwe": "CWE-326",
      "title": "Inadequate Encryption Strength in Panduit IntraVUE by Pronetiqs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50044"
    },
    {
      "rank": 365,
      "cve_id": "CVE-2026-57626",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00128,
      "epss_percentile": 0.02718,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MailPoet",
      "product": "MailPoet",
      "cwe": "CWE-352",
      "title": "WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57626"
    },
    {
      "rank": 366,
      "cve_id": "CVE-2026-65488",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00128,
      "epss_percentile": 0.02717,
      "kev": false,
      "kev_due_at": null,
      "vendor": "LA-Studio",
      "product": "LA-Studio Element Kit for Elementor",
      "cwe": "CWE-352",
      "title": "WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65488"
    },
    {
      "rank": 367,
      "cve_id": "CVE-2026-65539",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00128,
      "epss_percentile": 0.02716,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bimal Rekhadiya",
      "product": "Kwayy HTML Sitemap",
      "cwe": "CWE-352",
      "title": "WordPress Kwayy HTML Sitemap plugin <= 4.0 - CSRF to Stored XSS vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65539"
    },
    {
      "rank": 368,
      "cve_id": "CVE-2026-65540",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00128,
      "epss_percentile": 0.02717,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Metin Saraç",
      "product": "Popup for CF7 with Sweet Alert",
      "cwe": "CWE-352",
      "title": "WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65540"
    },
    {
      "rank": 369,
      "cve_id": "CVE-2026-64876",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00127,
      "epss_percentile": 0.02607,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "GeoIP extension for Joomla",
      "cwe": "CWE-352",
      "title": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64876"
    },
    {
      "rank": 370,
      "cve_id": "CVE-2026-64811",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00126,
      "epss_percentile": 0.02497,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-829",
      "title": "In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64811"
    },
    {
      "rank": 371,
      "cve_id": "CVE-2026-52688",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00122,
      "epss_percentile": 0.02211,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PowerDNS",
      "product": "Recursor",
      "cwe": "CWE-295",
      "title": "RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52688"
    },
    {
      "rank": 372,
      "cve_id": "CVE-2024-58023",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.0011,
      "epss_percentile": 0.01417,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bosch",
      "product": "Bosch Configuration Manager",
      "cwe": "CWE-312",
      "title": "Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58023"
    },
    {
      "rank": 373,
      "cve_id": "CVE-2026-52686",
      "cvss_base": 3.7,
      "cvss_severity": "LOW",
      "epss_score": 0.00109,
      "epss_percentile": 0.01334,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PowerDNS",
      "product": "Recursor",
      "cwe": "CWE-347",
      "title": "Wildcard CNAME proof validation bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52686"
    },
    {
      "rank": 374,
      "cve_id": "CVE-2026-64871",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00093,
      "epss_percentile": 0.0065,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Cache Cleaner extension for Joomla",
      "cwe": "CWE-352",
      "title": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64871"
    },
    {
      "rank": 375,
      "cve_id": "CVE-2026-59676",
      "cvss_base": 5.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00087,
      "epss_percentile": 0.00404,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SELinuxProject",
      "product": "selinux",
      "cwe": "CWE-367",
      "title": "Local File Deletion Attack Vector in rm_rf() in seunshare",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59676"
    },
    {
      "rank": 376,
      "cve_id": "CVE-2026-43820",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00078,
      "epss_percentile": 0.0015,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "swift-nio-ssl",
      "cwe": "CWE-125",
      "title": "NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by ASN1_STRING, so accessing the buffer for such a type can lead to out-of-bounds memory access. This vulnerability is addressed in swift-nio-ssl version 2.37.2.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43820"
    }
  ],
  "transactions": [
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-16489",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-16489 (jsforce). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-16628",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-16628 (oclif). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-16630",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-16630 (syncfusion ej2-javascript-ui-controls). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-20253",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-20253 (Splunk Enterprise). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-26740",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-26740. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-34908",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-34908 (Ubiquiti UniFi OS). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-34909",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-34909 (Ubiquiti UniFi OS). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-34910",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-34910 (Ubiquiti UniFi OS). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-42999",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-42999 (OpenStack Keystone). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-43000",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-43000 (OpenStack Keystone). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-44210",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-44210 (kata-containers). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-44891",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-44891 (netty). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-55831",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-55831 (netty). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-56292",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-56292 (acymailing.com AcyMailing extension for Joomla). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-57827",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-57827 (rsjoomla.com RSFiles extension for Joomla). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-57828",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-57828 (phoca.cz Phoca Download extension for Joomla). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-64600",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-64600 (Linux). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65012",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65012 (invoke-ai InvokeAI). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65013",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65013 (onlook repo). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65898",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65898 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65899",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65899 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65900",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65900 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65901",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65901 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65902",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65902 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65903",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65903 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65904",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65904 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65911",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65911 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65914",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65914 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-10732",
      "detail": "RESCORED — CVE-2026-10732 (decompress). CVSS 6.1 → 5.6 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-13448",
      "detail": "RESCORED — CVE-2026-13448 (IBM Langflow OSS). CVSS 8.1 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-16631",
      "detail": "RESCORED — CVE-2026-16631 (publint). CVSS 4.8 → 1.9 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-16632",
      "detail": "RESCORED — CVE-2026-16632 (boazsegev facil.io). CVSS 6.9 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-42010",
      "detail": "RESCORED — CVE-2026-42010 (Red Hat Enterprise Linux 10). CVSS 7.1 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-42975",
      "detail": "RESCORED — CVE-2026-42975 (Microsoft Windows 10 Version 1607). CVSS 8 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-42999",
      "detail": "RESCORED — CVE-2026-42999 (OpenStack Keystone). CVSS 6 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-43000",
      "detail": "RESCORED — CVE-2026-43000 (OpenStack Keystone). CVSS 6 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-44930",
      "detail": "RESCORED — CVE-2026-44930 (Apache Software Foundation Apache CXF). CVSS 4.3 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-50317",
      "detail": "RESCORED — CVE-2026-50317 (Microsoft Windows 11 Version 24H2). CVSS 7.8 → 7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-50406",
      "detail": "RESCORED — CVE-2026-50406 (Microsoft Windows 10 Version 21H2). CVSS 7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-50440",
      "detail": "RESCORED — CVE-2026-50440 (Microsoft Windows 11 Version 24H2). CVSS 7.8 → 7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-50491",
      "detail": "RESCORED — CVE-2026-50491 (Microsoft Windows 10 Version 1607). CVSS 7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-54989",
      "detail": "RESCORED — CVE-2026-54989 (Microsoft Windows 10 Version 1607). CVSS 7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-56187",
      "detail": "RESCORED — CVE-2026-56187 (Microsoft Windows 11 Version 24H2). CVSS 7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-57089",
      "detail": "RESCORED — CVE-2026-57089 (Microsoft Windows 10 Version 1607). CVSS 7.5 → 9.8 (NVD)."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-10520",
      "detail": "ENRICHED — CVE-2026-10520 (Ivanti Sentry). Received CVSS 10.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-11645",
      "detail": "ENRICHED — CVE-2026-11645 (Google Chromium V8). Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-20253",
      "detail": "ENRICHED — CVE-2026-20253 (Splunk Enterprise). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-25089",
      "detail": "ENRICHED — CVE-2026-25089 (Fortinet FortiSandbox). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-34908",
      "detail": "ENRICHED — CVE-2026-34908 (Ubiquiti UniFi OS). Received CVSS 10.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-34909",
      "detail": "ENRICHED — CVE-2026-34909 (Ubiquiti UniFi OS). Received CVSS 10.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-34910",
      "detail": "ENRICHED — CVE-2026-34910 (Ubiquiti UniFi OS). Received CVSS 10.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-34926",
      "detail": "ENRICHED — CVE-2026-34926 (Trend Micro Apex One). Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-35273",
      "detail": "ENRICHED — CVE-2026-35273 (Oracle  PeopleSoft Enterprise PeopleTools). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-45498",
      "detail": "ENRICHED — CVE-2026-45498 (Microsoft Defender). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-45659",
      "detail": "ENRICHED — CVE-2026-45659 (Microsoft SharePoint Server). Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-48172",
      "detail": "ENRICHED — CVE-2026-48172 (LiteSpeed cPanel Plugin). Received CVSS 10.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-48907",
      "detail": "ENRICHED — CVE-2026-48907 (Widget Factory Joomla Content Editor ). Received CVSS 10.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-54420",
      "detail": "ENRICHED — CVE-2026-54420 (LiteSpeed cPanel Plugin). Received CVSS 8.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-9082",
      "detail": "ENRICHED — CVE-2026-9082 (Drupal Core). Received CVSS 9.8 and CPE data from NVD."
    }
  ],
  "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/."
}