Vulnerabilities
Summary — last 7 days
New vulnerabilities5,243▲ 2,495 vs. last week
Critical / high2,940▲ 1,611 vs. last week
New active exploitation (KEV)11▲ 7 vs. last week
Unscored (no CVSS)219▲ 45 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (4.3) | 0.25% | — | Hasthemes Ever Compare | 3/27/2023 | 6/17/2026 | The Ever Compare WordPress plugin through 1.2.3 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack |