Vulnerabilities
Summary — last 7 days
New vulnerabilities4,835▲ 1,824 vs. last week
Critical / high2,645▲ 1,122 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)250▲ 80 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.15% | — | DukapressAI | 3/11/2026 | 6/17/2026 | The DukaPress WordPress plugin through 3.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | |
| Modified | Critical (9.8) | 2.6% | — | Dukapress Project Dukapress | 10/6/2016 | 6/17/2026 | Blind SQL Injection in wordpress plugin dukapress v2.5.9 | |
| Modified | Medium (5) | 68% | 💥 Exploit | Dukapress | 11/28/2014 | 6/17/2026 | Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter to lib/dp_image.php. |