Vulnerabilities
Summary — last 7 days
New vulnerabilities5,004▲ 140 vs. last week
Critical / high2,117▼ 662 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)818▲ 755 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 2.1% | Exploit | Themegrill Masteriyo | 5/17/2024 | 6/17/2026 | Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2. | |
| Modified | Critical (9.8) | 65% | Exploit | Colorlib ActivelloColorlib BonkersColorlib IlldyColorlib Newspaper X+12 | 6/7/2023 | 6/17/2026 | The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <=… | |
| Modified | Critical (9.1) | 4.1% | Exploit | Themegrill Demo Importer | 5/5/2021 | 6/17/2026 | themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook. |