CVE Tools
Track your stack

Notfound

18 CVEs tracked since 2025. Since Jan 2025, none of them reached CISA KEV.

Notfound CVEs per month

Jan 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Notfound CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0160
2025-0250
2025-035 or fewer
2025-0470
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Notfound's monthly top three, with their CVEs summed over those months.

  1. Hero Mega Menu - Responsive WordPress Menu Plugin31 month
  2. Wpjobboard31 month
  3. Admin and Site Enhancements (Ase) Pro22 months
  4. Ad Inserter Pro11 month
  5. Bridge Core11 month
  6. Chaty Pro11 month
  7. Global Gallery11 month
  8. Macro Calculator With Admin Email Optin & Data11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Notfound.

  1. CVE-2025-30967WordPress WPJobBoard plugin < 5.11.1 - CSRF to Remote Code Execution (RCE) vulnerability9.6
  2. CVE-2025-30966WordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerability5.4
  3. CVE-2025-27008WordPress Unlimited Timeline < 1.6.1 - Broken Access Control Vulnerability7.5
  4. CVE-2025-26730WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability7.5
  5. CVE-2025-22263WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  6. CVE-2025-30965WordPress WPJobBoard plugin < 5.11.1 - Multiple Cross Site Request Forgery (CSRF) vulnerabilities vulnerability4.3
  7. CVE-2025-31409WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerability6.5
  8. CVE-2025-26972WordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  9. CVE-2025-26940WordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability6.3
  10. CVE-2025-25129WordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  11. CVE-2025-26948WordPress Pie Register Premium plugin <= 3.8.3.2 - Broken Access Control vulnerability4.3
  12. CVE-2025-26776WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability10.0
  13. CVE-2025-22680WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  14. CVE-2024-43333WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability7.5
  15. CVE-2025-24781WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1

The record

Peak rank
#113 in Apr 2025
Busiest month shown
Apr 2025, 7 CVEs
Months with a KEV entry
0 since Jan 2025
Monthly snapshots
3 since 2025
Notfound's full record, month by month