Vulnerabilities
Summary — last 7 days
New vulnerabilities5,323▲ 2,531 vs. last week
Critical / high2,968▲ 1,645 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)176▼ 26 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (4.8) | 0.60% | — | Opensea Project Opeansea | 4/25/2022 | 6/17/2026 | The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. |