Vulnerabilities
Summary — last 7 days
New vulnerabilities3,027▼ 69 vs. last week
Critical / high1,424▲ 58 vs. last week
New active exploitation (KEV)4▼ 5 vs. last week
Unscored (no CVSS)382▼ 128 vs. last week
28 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.1) | 0.41% | — | SEO Plugin BY Squirrly SEO | 5/8/2023 | 6/17/2026 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin <= 12.1.20 versions. | |
| Modified | High (8.8) | 0.78% | — | SEO Plugin BY Squirrly SEO | 11/28/2022 | 6/17/2026 | Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress. | |
| Modified | Medium (6.1) | 0.80% | — | SEO Plugin BY Squirrly SEO | 3/21/2022 | 6/17/2026 | The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting |