Vulnerabilities
Summary — last 7 days
New vulnerabilities5,058▲ 1,855 vs. last week
Critical / high2,811▲ 1,257 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)196▼ 12 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.2) | 0.36% | — | Multiple Roles PER UserAI | 11/18/2025 | 6/17/2026 | The Multiple Roles per User plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mrpu_add_multiple_roles_ui' and 'mrpu_save_multiple_user_roles' functions in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, granted… | |
| Modified | Medium (4.3) | 0.41% | — | Multiple Roles Project Multiple Roles | 7/1/2023 | 6/17/2026 | The Multiple Roles plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the mu_add_roles_in_signup_meta() and mu_add_roles_in_signup_meta_recently() functions. This makes it possible for unauthenticated… | |
| Modified | High (8.8) | 1.5% | — | Hmplugin HM Multiple Roles | 8/23/2021 | 6/17/2026 | The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page |