Vulnerabilities
Summary — last 7 days
New vulnerabilities4,624▼ 563 vs. last week
Critical / high1,828▼ 1,122 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)862▲ 764 vs. last week
More filters
6 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.8) | 0.35% | — | Brainstormforce Pre-publish Checklist | 6/19/2024 | 6/17/2026 | Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1. | |
| Modified | High (8.8) | 0.60% | — | Genki Pre-publish Reminder Project Genki Pre-publish Reminder | 6/13/2022 | 6/17/2026 | The Genki Pre-Publish Reminder WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS as well as RCE when custom code is added via the plugin settings. | |
| Modified | Medium (6.8) | 0.72% | — | E-publish Project E-publish | 4/27/2008 | 6/16/2026 | Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors. | |
| Modified | Medium (4.3) | 1.0% | — | Drupal E-publish | 4/27/2008 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modified | Medium (4.3) | 1.3% | — | E-publish | 12/20/2005 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) obcatid and (2) comid parameters. | |
| Modified | High (7.5) | 1.3% | — | E-publish CMSAI | 12/20/2005 | 6/16/2026 | SQL injection vulnerability in printer_friendly.cfm in e-publish CMS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. |