Whitehat SecurityTM · Trademark pending

Today's vulnerabilities

Public security information gathered hourly, actively exploited issues first, with our own short summary and a link to the original.

  • Auto-updated hourly · last updated 11/14/2026, 09:35
  • 119 total
  • 50 exploited
  • Critical 83
  • High 36
  • Critical · CVSS 9.8WordPressOnline storenvd:CVE-2026-93754

    WordPress payever (CVE-2026-93754) [CVSS 9.8]

    A vulnerability in WordPress payever (CVE-2026-93754) [CVSS 9.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    WordPress payever (CVE-2026-93754) [CVSS 9.8]
    Published
    2026-11-07

    Source · NVD

  • Exploited in the wildCriticalOnline storekev:CVE-2026-48356

    Adobe Commerce and Magento (CVE-2026-48356)

    A vulnerability in Adobe Commerce and Magento (CVE-2026-48356) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Adobe Commerce and Magento (CVE-2026-48356)
    Published
    2026-10-27
    US federal due date
    2026-11-10

    Read our explainer

    Source · CISASource · NVD

Is your site affected?

Tell us your stack and we will tell you whether it applies and what to do first.