Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 4 of 2,711
CVE-2026-65561 MEDIUM 6.5
CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-65557 MEDIUM 5.9
CWE-79 Remote (AV:N)

Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-65434 MEDIUM 6.5
CWE-201 Remote (AV:N)

Subscriber Sensitive Data Exposure in ะฎKassa ะดะปั WooCommerce <= 2.16.1 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-65433 MEDIUM 6.5
CWE-862 Remote (AV:N)

Subscriber Broken Access Control in RT Mega Menu โ€“ Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-59559 MEDIUM 6.5
CWE-79 Remote (AV:N)

Subscriber Cross Site Scripting (XSS) in RT Mega Menu โ€“ Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-918 Remote (AV:N)

Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer &amp; Embedder <= 1.4.2 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-59549 CRITICAL 9.3
CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-497 Remote (AV:N)

Unauthenticated Sensitive Data Exposure in Byteflows Travel &amp; Hotel Booking <= 1.0.0 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-639 Remote (AV:N)

Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-89 Remote (AV:N)

Administrator SQL Injection in Sender โ€“ Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in CoCart โ€“ Headless ecommerce <= 4.8.4 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
Showing Page 4 of 2,711 • 65,059 newly disclosed advisories