Vulnerabilities
Summary — last 7 days
New vulnerabilities2,768▼ 428 vs. last week
Critical / high1,324▼ 116 vs. last week
New active exploitation (KEV)4▼ 5 vs. last week
Unscored (no CVSS)265▼ 243 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.3) | 0.44% | — | SchedulepressAI | 7/16/2024 | 6/17/2026 | The SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.1.3. This is due the plugin utilizing the wpdeveloper library and leaving the demo files… | |
| Deferred | Medium (6.5) | 0.60% | — | Wpdeveloper SchedulepressAI | 5/14/2024 | 6/17/2026 | Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.8. |