Feed live

The CMS vulnerability ledger.

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

707

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-12210	medium	5.3/10	universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery	Jun 15, 2026 12d ago
CVE-2026-52860	high	7.5/10	Vim: Arbitrary Code Execution via Python Omni-Completion	Jun 11, 2026 15d ago
CVE-2026-52858	high	7.3/10	Vim: Arbitrary Code Execution via Python Omni-Completion	Jun 11, 2026 15d ago
CVE-2026-10143	high	7.5/10	kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py	Jun 10, 2026 16d ago
CVE-2026-10142	high	7.5/10	kafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame Length	Jun 10, 2026 16d ago
CVE-2026-46497	low	2.3/10	SSRF via sitemap-derived URLs in Crawlee for Python	Jun 10, 2026 16d ago
CVE-2026-45426	—	—	Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access	Jun 1, 2026 26d ago
CVE-2026-45017	high	8.2/10	Python Liquid: Absolute paths escape filesystem loader search path	May 28, 2026 29d ago
CVE-2026-45136	high	8.6/10	claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh	May 27, 2026 1mo ago
CVE-2026-44887	critical	9.8/10	Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Path)	May 27, 2026 1mo ago
CVE-2026-44888	critical	9.8/10	Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Interger)	May 27, 2026 1mo ago
CVE-2026-44723	medium	5.0/10	Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runner	May 26, 2026 1mo ago
CVE-2026-5817	high	8.8/10	Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends	May 22, 2026 1mo ago
CVE-2026-8838	critical	9.8/10	Remote Code Execution via eval() Injection in amazon-redshift-python-driver	May 18, 2026 1mo ago
CVE-2026-45369	high	8.3/10	python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol	May 14, 2026 1mo ago
CVE-2026-45370	high	7.7/10	python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection	May 14, 2026 1mo ago
CVE-2026-44661	medium	4.7/10	python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol	May 14, 2026 1mo ago
CVE-2026-8597	high	7.2/10	Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK	May 14, 2026 1mo ago
CVE-2026-8596	high	7.2/10	Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path	May 14, 2026 1mo ago
CVE-2026-42561	high	7.5/10	Python-Multipart: Denial of Service via unbounded multipart part headers	May 13, 2026 1mo ago
CVE-2026-45227	high	8.7/10	Heym < 0.0.21 Sandbox Escape via Python Introspection	May 12, 2026 1mo ago
CVE-2026-44336	critical	9.4/10	PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection	May 8, 2026 1mo ago
CVE-2026-41900	high	8.8/10	OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment	May 8, 2026 1mo ago
CVE-2026-44243	high	7.8/10	GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository	May 7, 2026 1mo ago
CVE-2026-44244	high	7.8/10	GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath	May 7, 2026 1mo ago
CVE-2026-42284	high	8.1/10	GitPython: Unsafe option check validates multi_options before shlex.split transforms it	May 7, 2026 1mo ago
CVE-2026-42215	high	8.8/10	GitPython: Command injection via Git options bypass	May 7, 2026 1mo ago
CVE-2026-7810	medium	6.9/10	UsamaK98 python-notebook-mcp server.py add_cell path traversal	May 5, 2026 1mo ago
CVE-2026-42234	high	7.1/10	n8n: Python Task Runner Sandbox Escape	May 4, 2026 1mo ago
CVE-2026-42079	high	8.6/10	PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope	May 4, 2026 1mo ago