October 2016 · Band 2
Check available, not yet exploited
29 CVEs
Each square is a CVE with a public nuclei template and no known exploitation yet. The named ones are the most likely to be exploited.
- check available
- 29
Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.
- Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage
- WordPress MyPixs <=0.3 - Local File Inclusion
- WordPress Candidate Application Form <= 1.3 - Local File Inclusion
- WordPress Simple Image Manipulator < 1.0 - Local File Inclusion
- WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
- WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
- WordPress e-search <=1.0 - Cross-Site Scripting
- WordPress WPSOLR <=8.6 - Cross-Site Scripting
- WordPress Tidio Gallery <=1.1 - Cross-Site Scripting
- WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting
- WordPress Hero Maps Pro 2.1.0 - Cross-Site Scripting
- WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting
- WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting
- WordPress anti-plagiarism <=3.60 - Cross-Site Scripting
- WordPress Tidio-form <=1.0 - Cross-Site Scripting
- WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting
- WordPress AJAX Random Post <=2.00 - Cross-Site Scripting
- WordPress Admin Font Editor <=1.8 - Cross-Site Scripting
- WordPress Photoxhibit 2.1.8 - Cross-Site Scripting
- WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting
- WordPress Page Layout builder v1.9.3 - Cross-Site Scripting
- WordPress WHIZZ <=1.0.7 - Cross-Site Scripting
- WordPress New Year Firework <=1.1.9 - Cross-Site Scripting
- WordPress Admin Font Editor <=1.8 - Cross-Site Scripting
- WordPress heat-trackr 1.0 - Cross-Site Scripting
- WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.