Check available, not yet exploited

Every one of the 32 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PrestaShop SmartBlog <4.0.6 - SQL InjectionCVE-2021-3753874% likely

   CWE-89

2. Advantech R-SeeNet 2.4.12 - OS Command InjectionCVE-2021-21805Advantech · CVSS 9.8 · 70% likely

   CWE-78

3. WordPress DZS Zoomsounds <=6.50 - Local File InclusionCVE-2021-39316ZoomIt · CVSS 7.5 · 66% likely

   CWE-22ZoomIt

4. WordPress Workreap - Remote Code ExecutionCVE-2021-24499Workreap · 60% likely

   CWE-434

5. Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request ForgeryCVE-2021-24472QantumThemes · 57% likely

   CWE-918QantumThemes

6. Kramer VIAware - Remote Code ExecutionCVE-2021-3635654% likely

   CWE-434

7. XStream 1.4.18 - Remote Code ExecutionCVE-2021-39141x-stream · CVSS 8.5 · 16% likely

   CWE-434X-Stream

8. PrestaHome Blog for PrestaShop <1.7.8 - SQL InjectionCVE-2021-3674815% likely

   CWE-89

9. XStream 1.4.18 - Arbitrary Code ExecutionCVE-2021-39146x-stream · CVSS 8.5 · 14% likely

   CWE-434X-Stream

10. XStream <1.4.18 - Server-Side Request ForgeryCVE-2021-39152x-stream · CVSS 8.5 · 11% likely

    CWE-502X-Stream

11. WordPress Post Grid <2.1.8 - Cross-Site ScriptingCVE-2021-24488Post Grid · 11% likely

    CWE-79

12. Profile Builder < 3.4.9 - Improper AuthenticationCVE-2021-24527User Registration & User Profile – Profile Builder · 8.9% likely

    CWE-287

13. Cachet <=2.3.18 - SQL InjectionCVE-2021-39165fiveai · CVSS 8.1 · 8.2% likely

    CWE-287

14. Cyberoam NetGenie Cross-Site ScriptingCVE-2021-387026.7% likely

    CWE-79

15. WordPress Paytm Donation <=1.3.2 - Authenticated SQL InjectionCVE-2021-24554Paytm – Donation Plugin · 6.6% likely

    CWE-89

16. phpfastcache - phpinfo Resource ExposureCVE-2021-37704PHPSocialNetwork · CVSS 5.4 · 5.1% likely

    CWE-200

17. Hotel Druid 3.0.2 - Cross-Site ScriptingCVE-2021-378334.3% likely

    CWE-79

18. Mautic <3.3.4 - Cross-Site ScriptingCVE-2021-27909Mautic · CVSS 6.3 · 4.1% likely

    CWE-79Mautic

19. Canon Devices - Authentication Bypass in Catwalk ServerCVE-2021-381544.0% likely

    CWE-732

20. WordPress Calendar Event Multi View <1.4.01 - Cross-Site ScriptingCVE-2021-24498Calendar Event Multi View · 3.5% likely

    CWE-79

21. MaxSite CMS > V106 - Cross-Site ScriptingCVE-2021-352653.4% likely

    CWE-79

22. Tiny Java Web Server - Cross-Site ScriptingCVE-2021-375733.4% likely

    CWE-79

23. Wordpress Marmoset Viewer <1.9.3 - Cross-Site ScriptingCVE-2021-24495Marmoset Viewer · 3.3% likely

    CWE-79

24. QSAN Storage Manager <3.3.3 - Cross-Site ScriptingCVE-2021-37216QSAN · CVSS 6.1 · 3.2% likely

    CWE-79QSAN

25. Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site ScriptingCVE-2021-374162.9% likely

    CWE-79

26. WordPress Quiz and Survey Master <7.1.14 - Cross-Site ScriptingCVE-2021-20792ExpressTech · 2.9% likely

    CWE-79ExpressTech

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.