Vulnerabilities
Summary — last 7 days
New vulnerabilities5,186▲ 2,386 vs. last week
Critical / high2,903▲ 1,517 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)222▲ 49 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.26% | — | Grey Opaque Project Grey Opaque | 6/22/2024 | 6/17/2026 | The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Download-Button shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with… |