Vulnerabilities
Summary — last 7 days
New vulnerabilities5,058▲ 1,855 vs. last week
Critical / high2,811▲ 1,257 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)196▼ 12 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (4.3) | 0.39% | — | Rucy Project Rucy | 7/1/2023 | 6/17/2026 | The Rucy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.4.4. This is due to missing or incorrect nonce validation on the save_rc_post_meta() function. This makes it possible for unauthenticated attackers to save post meta via a forged request granted they can trick… |