Vulnerabilities

Summary — last 7 days

New vulnerabilities2,597▼ 310 vs. last week
Critical / high1,338▲ 74 vs. last week
New active exploitation (KEV)6▼ 5 vs. last week
Unscored (no CVSS)64▼ 463 vs. last week
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
AnalyzedMedium (5.1)0.24%—Mybb Delete Account1/23/20266/17/2026
MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.
ModifiedMedium (6.1)0.77%—Delete Account Project Delete Account2/1/20216/17/2026
deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter.