Vulnerabilities

Summary — last 7 days

New vulnerabilities2,633▼ 304 vs. last week
Critical / high1,352▲ 80 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)58▼ 469 vs. last week
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (8.8)0.26%—Dogblocker Read More Excerpt Link5/23/20236/17/2026
Cross-Site Request Forgery (CSRF) vulnerability in Tim Eckel Read More Excerpt Link plugin <= 1.6 versions.
ModifiedMedium (4.3)0.30%—Read More Excerpt Link Project Read More Excerpt Link2/27/20236/17/2026
The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the read_more_excerpt_link_menu_options() function. This makes it possible for unauthenticated attackers to update he…