Kythos AI

CVE watch Past 48 hours+

Latest 48 of 1022 in cacheBrowse CVEs
NVD checked Nov 8, 06:27 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,465–1,488 of 1,769

CISA KEV

CVE-2010-1871: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

Red Hat · JBoss Seam 2

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.

Federal remediation due Jun 10, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution

Federal remediation due Dec 15, 2021Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-11261: Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, S

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Federal remediation due Jun 1, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2021-42013: Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server

Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves…

Federal remediation due Nov 17, 2021Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2021-41773: Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server

Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. The original patch issued…

Federal remediation due Nov 17, 2021Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 337–360 of 1,041

NVD CVE

CVE-2026-121792

The GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI plugin for WordPress is vulnerable to generic SQL Injection via the 'input_. (Gravity Forms name-field part, or list-field row)' parameter in all versions up to, and including, 8.1.1 due to…

CVSS 6.5 MEDIUMStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-121536

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to generic SQL Injection via the 'engine' parameter in all versions up to, and including, 5.5.90 due to insufficient escaping on the user supplied parameter and lack…

CVSS 5.3 MEDIUMStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-120537

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (storage); originals / language / original_language (exfiltration from endpoint)' parameter in all versions up to, and including, 3.3.8 due to insufficient input sanitization and output…

CVSS 7.2 HIGHStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-120530

The WebToffee WP Backup and Migration plugin for WordPress is vulnerable to generic SQL Injection via the 'description' parameter in all versions up to, and including, 1.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…

CVSS 5.7 MEDIUMStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-120515

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' settings in versions up to, and including, 10.3. This is due to insufficient input sanitization and output escaping on these settings as they…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-120479

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Data Projects front-end simple form in versions up to, and including, 5.5.90 This is due to insufficient input sanitization and output…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-118801

The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.18.0 via the 'id' parameter. This makes it possible for authenticated attackers, with contributor-level access…

CVSS 4.3 MEDIUMStatus: DeferredCWE-200

Review the NVD record →

NVD CVE

CVE-2026-118800

The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingTag' parameter in all versions up to, and including, 2.18.0 due to insufficient input sanitization and output escaping. This makes…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-118204

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ImageURL column value (populated from wp_usermeta.description in the demonstrated path)' parameter in all versions up to, and including, 5.5.89 due to…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-118048

The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Simple Form autocomplete lookup label in versions up to, and including, 5.5.89 This is due to insufficient output escaping on the value returned by WPDA_Autocomplet[network address omitted]utocomplete_lookup() when it is emitted…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-116621

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pm_note (any custom Textarea metakey with html disabled)' parameter in all versions up to, and including, 2.14.1 due to insufficient…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-116558

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/ inside the attacker-controlled RSS feed body' parameter in all versions up to, and including, 2.0.26 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…

CVSS 7.2 HIGHStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-115811

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'star_rating' parameter in all versions up to, and including, 3.3.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages…

CVSS 7.2 HIGHStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-103917

The The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 11.2.7. This is due to the software allowing users to execute an action that does not properly…

CVSS 6.5 MEDIUMStatus: DeferredCWE-94

Review the NVD record →

NVD CVE

CVE-2026-97191

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not re-apply its field-group location rules when persisting values submitted through the post editor save path, allowing users with contributor-level access and above to write custom fields the site restricted to administrators onto their own posts.

CVSS 2.7 LOWStatus: ReceivedCWE-284

Review the NVD record →

NVD CVE

CVE-2026-97190

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not verify that a user is allowed to edit the target object before writing to it during bidirectional relationship synchronization, allowing users with contributor-level access and above to add or remove a reference to their own…

CVSS 2.7 LOWStatus: ReceivedCWE-639

Review the NVD record →

NVD CVE

CVE-2026-97189

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access (Contributor and above) to disclose the titles and non-public statuses of other users' unpublished posts.

CVSS 2.7 LOWStatus: ReceivedCWE-200

Review the NVD record →

NVD CVE

CVE-2026-122001

The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request forged in a logged-in administrator's browser is accepted, which can be used to create a new administrator account and…

CVSS 8.8 HIGHStatus: ReceivedCWE-352

Review the NVD record →

NVD CVE

CVE-2026-121866

The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions that update a site option chosen by the request, allowing any authenticated user, such as a subscriber, to change arbitrary WordPress options and escalate to administrator,…

CVSS 8.8 HIGHStatus: ReceivedCWE-269

Review the NVD record →

NVD CVE

CVE-2026-121858

The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in…

CVSS 6.3 MEDIUMStatus: ReceivedCWE-89

Review the NVD record →

NVD CVE

CVE-2026-121857

The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders before returning or removing ticket data for any order, allowing any role an administrator has granted access to the Event Tickets with Ticket Scanner WordPress plugin…

CVSS 4.2 MEDIUMStatus: ReceivedCWE-863

Review the NVD record →

NVD CVE

CVE-2026-121848

The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in…

CVSS 8.8 HIGHStatus: ReceivedCWE-269

Review the NVD record →

NVD CVE

CVE-2026-121796

The Add From Server Lite WordPress plugin before 6.0.0 does not restrict SVG uploads to users allowed to post unfiltered HTML, allowing users with the Author role and above to upload SVG files containing JavaScript and perform Stored XSS attacks.

CVSS 6.8 MEDIUMStatus: ReceivedCWE-79

Review the NVD record →

NVD CVE

CVE-2026-121492

The Fiber Admin WordPress plugin before 4.0.1 does not have authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the order of arbitrary posts, including drafts, private posts and navigation menu items, as well as the order of taxonomy terms when term…

CVSS 5.3 MEDIUMStatus: ReceivedCWE-862

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 6, 2026 06:27–Nov 8, 2026 06:27API response: Site snapshot: Showing 24 of 1,041Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours