Vulnerabilities
Summary — last 7 days
New vulnerabilities3,317▲ 673 vs. last week
Critical / high1,557▲ 159 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)252▲ 240 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.1) | 0.22% | — | Otasync OTA Sync Booking Engine Widget | 8/21/2024 | 6/17/2026 | The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.7. This is due to missing or incorrect nonce validation on the otasync_widget_settings_fnc() function. This makes it possible for unauthenticated attackers to update the… | |
| Modified | High (7.5) | 3.6% | — | Netcode NC Book | 8/13/2001 | 6/16/2026 | book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter. |