Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 46,443 fresh security advisories

Page 145 of 1,936

CVE-2026-39724 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-39722 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-39720 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-39719 HIGH 7.2

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32581 HIGH 7.1

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32580 HIGH 7.5

Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32578 HIGH 7.1

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32577 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32575 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32574 HIGH 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a t...

📅 2026-10-06 Inspect Dossier →

CVE-2026-32572 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32570 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32569 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-25434 HIGH 8.5

Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-25433 HIGH 7.1

Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105317 HIGH 8.5

Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105071 HIGH 7.5

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105070 HIGH 8.8

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105061 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105058 HIGH 8.8

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104814 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104757 HIGH 7.2

Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104747 HIGH 8.1

Unauthenticated PHP Object Injection in Haaken <= 1.5 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104672 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions....

📅 2026-10-06 Inspect Dossier →

Showing Page 145 of 1,936 • 46,443 newly disclosed advisories

← Previous Next →