Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.1 MEDIUM
CVE-2026-6711 — Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting

The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6. This is due to the use of filter_input()…

Remote | Cross-Site Scripting
Apr 21, 2026 Apr 22, 2026
Apr 21, 2026
Apr 22, 2026
4.3 MEDIUM
CVE-2026-6703 — Responsive Blocks <= 2.2.1 - Missing Authorization to Authenticated (Contributor+) Arbitr…

The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1. This is due to the plugin not properl…

responsive_blocks | Remote | Authorization
Apr 21, 2026 Apr 22, 2026
Apr 21, 2026
Apr 22, 2026
6.3 MEDIUM
CVE-2026-31370 — Information Leak Vulnerability in Honor E

Honor E APP is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality.

Remote | Information Disclosure
Apr 21, 2026 May 10, 2026
Apr 21, 2026
May 10, 2026
3.2 LOW
CVE-2026-31369 — Privilege Bypass in PcManager

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability

| Authorization
Apr 21, 2026 May 05, 2026
Apr 21, 2026
May 05, 2026
7.8 HIGH
CVE-2026-31368 — Privilege Bypass in AiAssistant

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability.

| Authentication
Apr 21, 2026 May 10, 2026
Apr 21, 2026
May 10, 2026
Showing 20 of 6405 Results