Vulnerabilities
Summary — last 7 days
New vulnerabilities5,380▲ 2,535 vs. last week
Critical / high2,999▲ 1,643 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Medium (5.4) | 0.31% | — | Acekyd Display Medium Posts | 10/4/2024 | 6/17/2026 | The Display Medium Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_medium_posts shortcode in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated… | |
| Modified | High (7.8) | 8.5% | — | Adobe Medium | 9/8/2021 | 6/17/2026 | Medium by Adobe version 2.4.5.331 (and earlier) is affected by a buffer overflow vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a… | |
| Modified | Medium (6.1) | 6.4% | 💥 Exploit | Wowthemes Mediumish | 6/1/2021 | 6/17/2026 | The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue. | |
| Modified | Medium (6.4) | 2.3% | 💥 Exploit | Open-medium CMS | 5/31/2006 | 6/16/2026 | PHP remote file inclusion vulnerability in 404.php in open-medium.CMS 0.25 allows remote attackers to execute arbitrary PHP code via a URL in the REDSYS[MYPATH][TEMPLATES] parameter. |