Check available, not yet exploited

Every one of the 35 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Apache APISIX Dashboard <2.10.1 - API Unauthorized AccessCVE-2021-45232Apache Software Foundation · 86% likely

   CWE-306Apache

2. WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL InjectionCVE-2021-24931Ays-Pro · 79% likely

   CWE-89Ays Pro

3. WordPress True Ranker <2.2.4 - Local File InclusionCVE-2021-39312True Ranker · CVSS 7.5 · 78% likely

   CWE-22

4. WordPress Modern Events Calendar <6.1.5 - Blind SQL InjectionCVE-2021-24946Webnus · 73% likely

   CWE-89Webnus

5. WordPress WPS Hide Login <1.9.1 - Information DisclosureCVE-2021-24917Wpserveur · 72% likely

   CWE-863Wpserveur

6. Auerswald COMpact 5500R 7.8A and 8.0B Devices BackdoorCVE-2021-40859Auerswald · 72% likely

   Auerswald

7. Verint Workforce Optimization 15.2.8.10048 - Cross-Site ScriptingCVE-2021-36450Verint · 64% likely

   CWE-79Verint

8. Reprise License Manager 14.2 - Authentication BypassCVE-2021-44152Reprisesoftware · 59% likely

   CWE-306Reprisesoftware

9. Auerswald COMfortel 1400/2600/3600 IP - Authentication BypassCVE-2021-40856Auerswald · 50% likely

   CWE-706Auerswald

10. Thinfinity Iframe InjectionCVE-2021-45092Cybelesoft · 41% likely

    Cybelesoft

11. Trendnet AC2600 TEW-827DRU - Credentials DisclosureCVE-2021-20150Trendnet · 40% likely

    CWE-306Trendnet

12. WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL InjectionCVE-2021-24750Codepress · 38% likely

    CWE-89Codepress

13. Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command InjectionCVE-2021-21881Lantronix · CVSS 9.9 · 37% likely

    CWE-78Lantronix

14. HD-Network Realtime Monitoring System 2.0 - Local File InclusionCVE-2021-45043Hd-Network Real-Time Monitoring System Project · 33% likely

    CWE-22

15. SAP Knowledge Warehouse <=7.5.0 - Cross-Site ScriptingCVE-2021-42063SAP SE · 23% likely

    CWE-79SAP

16. Thinfinity VirtualUI User EnumerationCVE-2021-44848Cybelesoft · 23% likely

    CWE-203Cybelesoft

17. Trendnet AC2600 TEW-827DRU 2.08B01 - Admin Password ChangeCVE-2021-20158Trendnet · 9.6% likely

    CWE-306Trendnet

18. WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL InjectionCVE-2021-24849Wclovers · 8.4% likely

    CWE-89WC Lovers

19. Apereo CAS Cross-Site ScriptingCVE-2021-42567Apereo · 8.2% likely

    CWE-79Apereo1 bounty report

20. ThinkCMF X2.2.2 - Remote Code ExecutionCVE-2020-20601Thinkcmf · 7.4% likely

    CWE-94Thinkcmf

21. Registrations for the Events Calendar < 2.7.6 - SQL InjectionCVE-2021-24943Roundupwp · 7.3% likely

    CWE-89Roundupwp

22. Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer OverrunCVE-2021-20167Netgear · 7.0% likely

    CWE-77NETGEAR

23. RegistrationMagic <= 5.0.1.7 - Authentication BypassCVE-2021-4073RegistrationMagic · CVSS 9.8 · 6.8% likely

    CWE-287

24. WordPress Image Hover Ultimate - Unauthenticated Settings UpdateCVE-2021-36888Oxilab · CVSS 9.8 · 6.5% likely

    CWE-284

25. FatPipe WARP/IPVPN/MPVPN - Backdoor AccountCVE-2021-27856FatPipe · CVSS 9.8 · 5.5% likely

    FatPipe

26. Admidio - Cross-Site ScriptingCVE-2021-43810Admidio · CVSS 8.8 · 5.1% likely

    CWE-79Admidio

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.