Vulnerabilities
Summary — last 7 days
New vulnerabilities5,454▲ 2,666 vs. last week
Critical / high3,040▲ 1,714 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)156▼ 46 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.50% | — | Fruitfulcode Fruitful Theme | 6/7/2023 | 6/17/2026 | The Fruitful Theme for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters stored via the fruitful_theme_options_action AJAX action in versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with… |