Kythos AI

CVE watch Past 48 hours+

Latest 48 of 1022 in cacheBrowse CVEs
NVD checked Nov 8, 06:27 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,585–1,608 of 1,769

CISA KEV

CVE-2020-8468: Trend Micro Multiple Products Content Validation Escape Vulnerability

Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-8193: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-6820: Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla · Firefox and Thunderbird

Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-6819: Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla · Firefox and Thunderbird

Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-6418: Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8

Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge,…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 337–360 of 1,041

NVD CVE

CVE-2026-121792

The GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI plugin for WordPress is vulnerable to generic SQL Injection via the 'input_. (Gravity Forms name-field part, or list-field row)' parameter in all versions up to, and including, 8.1.1 due to…

CVSS 6.5 MEDIUMStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-121536

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to generic SQL Injection via the 'engine' parameter in all versions up to, and including, 5.5.90 due to insufficient escaping on the user supplied parameter and lack…

CVSS 5.3 MEDIUMStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-120537

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (storage); originals / language / original_language (exfiltration from endpoint)' parameter in all versions up to, and including, 3.3.8 due to insufficient input sanitization and output…

CVSS 7.2 HIGHStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-120530

The WebToffee WP Backup and Migration plugin for WordPress is vulnerable to generic SQL Injection via the 'description' parameter in all versions up to, and including, 1.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…

CVSS 5.7 MEDIUMStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-120515

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' settings in versions up to, and including, 10.3. This is due to insufficient input sanitization and output escaping on these settings as they…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-120479

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Data Projects front-end simple form in versions up to, and including, 5.5.90 This is due to insufficient input sanitization and output…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-118801

The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.18.0 via the 'id' parameter. This makes it possible for authenticated attackers, with contributor-level access…

CVSS 4.3 MEDIUMStatus: DeferredCWE-200

Review the NVD record →

NVD CVE

CVE-2026-118800

The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingTag' parameter in all versions up to, and including, 2.18.0 due to insufficient input sanitization and output escaping. This makes…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-118204

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ImageURL column value (populated from wp_usermeta.description in the demonstrated path)' parameter in all versions up to, and including, 5.5.89 due to…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-118048

The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Simple Form autocomplete lookup label in versions up to, and including, 5.5.89 This is due to insufficient output escaping on the value returned by WPDA_Autocomplet[network address omitted]utocomplete_lookup() when it is emitted…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-116621

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pm_note (any custom Textarea metakey with html disabled)' parameter in all versions up to, and including, 2.14.1 due to insufficient…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-116558

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/ inside the attacker-controlled RSS feed body' parameter in all versions up to, and including, 2.0.26 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…

CVSS 7.2 HIGHStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-115811

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'star_rating' parameter in all versions up to, and including, 3.3.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages…

CVSS 7.2 HIGHStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-103917

The The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 11.2.7. This is due to the software allowing users to execute an action that does not properly…

CVSS 6.5 MEDIUMStatus: DeferredCWE-94

Review the NVD record →

NVD CVE

CVE-2026-97191

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not re-apply its field-group location rules when persisting values submitted through the post editor save path, allowing users with contributor-level access and above to write custom fields the site restricted to administrators onto their own posts.

CVSS 2.7 LOWStatus: ReceivedCWE-284

Review the NVD record →

NVD CVE

CVE-2026-97190

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not verify that a user is allowed to edit the target object before writing to it during bidirectional relationship synchronization, allowing users with contributor-level access and above to add or remove a reference to their own…

CVSS 2.7 LOWStatus: ReceivedCWE-639

Review the NVD record →

NVD CVE

CVE-2026-97189

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access (Contributor and above) to disclose the titles and non-public statuses of other users' unpublished posts.

CVSS 2.7 LOWStatus: ReceivedCWE-200

Review the NVD record →

NVD CVE

CVE-2026-122001

The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request forged in a logged-in administrator's browser is accepted, which can be used to create a new administrator account and…

CVSS 8.8 HIGHStatus: ReceivedCWE-352

Review the NVD record →

NVD CVE

CVE-2026-121866

The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions that update a site option chosen by the request, allowing any authenticated user, such as a subscriber, to change arbitrary WordPress options and escalate to administrator,…

CVSS 8.8 HIGHStatus: ReceivedCWE-269

Review the NVD record →

NVD CVE

CVE-2026-121858

The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in…

CVSS 6.3 MEDIUMStatus: ReceivedCWE-89

Review the NVD record →

NVD CVE

CVE-2026-121857

The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders before returning or removing ticket data for any order, allowing any role an administrator has granted access to the Event Tickets with Ticket Scanner WordPress plugin…

CVSS 4.2 MEDIUMStatus: ReceivedCWE-863

Review the NVD record →

NVD CVE

CVE-2026-121848

The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in…

CVSS 8.8 HIGHStatus: ReceivedCWE-269

Review the NVD record →

NVD CVE

CVE-2026-121796

The Add From Server Lite WordPress plugin before 6.0.0 does not restrict SVG uploads to users allowed to post unfiltered HTML, allowing users with the Author role and above to upload SVG files containing JavaScript and perform Stored XSS attacks.

CVSS 6.8 MEDIUMStatus: ReceivedCWE-79

Review the NVD record →

NVD CVE

CVE-2026-121492

The Fiber Admin WordPress plugin before 4.0.1 does not have authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the order of arbitrary posts, including drafts, private posts and navigation menu items, as well as the order of taxonomy terms when term…

CVSS 5.3 MEDIUMStatus: ReceivedCWE-862

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 6, 2026 06:27–Nov 8, 2026 06:27API response: Site snapshot: Showing 24 of 1,041Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours