Vulnerabilities
Summary — last 7 days
New vulnerabilities5,243▲ 2,495 vs. last week
Critical / high2,940▲ 1,611 vs. last week
New active exploitation (KEV)11▲ 7 vs. last week
Unscored (no CVSS)219▲ 45 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (4.3) | 0.27% | — | Hasthemes Coupon ZEN | 3/27/2023 | 6/17/2026 | The Coupon Zen WordPress plugin before 1.0.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack |