Nuclei

WooCommerce Dynamic Pricing & Discounts (WC Designer Pro) Unauthenticated File Upload RCE (CVE-2025-6440) new EPSS 31%CVE-2025-6440webCRITICAL 9.8Unverified2026-07-06Twonky Server 8.5.2 Unauthenticated `/nmc/rpc/` Auth Bypass & Admin Credential Log Leak (CVE-2025-13315) new EPSS 33%CVE-2025-13315networkCRITICAL 9.8Unpatched2026-07-06Monsta FTP Pre-Authentication Remote Code Execution via Arbitrary File Upload (CVE-2025-34299) new EPSS 73%CVE-2025-34299networkCRITICAL 9.8Patched2026-07-06FreePBX Framework Module Authentication Bypass via Forged Authorization Header (CVE-2025-66039) newCVE-2025-66039networkCRITICAL 9.8Patched2026-07-06ProjeQtor Unauthenticated Login SQL Injection (CVE-2026-41462) newCVE-2026-41462webCRITICAL 9.8Patched2026-07-05Perfmatters WordPress Plugin Arbitrary File Deletion (CVE-2026-4350) newCVE-2026-4350webHIGH 8.1Unverified2026-07-05Gotenberg 8.29.1 Unauthenticated ExifTool Metadata Key Injection RCE (CVE-2026-42589) newCVE-2026-42589webCRITICAL 9.8Patched2026-07-05