Mass-Scanner

RestroPress WordPress Plugin Unauthenticated Information Exposure Leading to JWT Forgery / Account Takeover (CVE-2025-9209) newCVE-2025-9209webCRITICAL 9.8Unpatched2026-07-06Langflow Pre-Auth RCE Mass Scanner (CVE-2026-27966) new EPSS 34%CVE-2026-27966webCRITICAL 9.8Patched2026-07-06AI Engine WordPress Plugin Unauthenticated MCP Token Disclosure to Admin Account Creation (CVE-2025-11749) new EPSS 75%CVE-2025-11749webCRITICAL 9.8Unverified2026-07-06WordPress HT Mega (Absolute Addons for Elementor) Unauthenticated PII Disclosure (CVE-2026-4106) newCVE-2026-4106webHIGHUnverified2026-07-05