Vulnerabilities
Summary — last 7 days
New vulnerabilities3,381▲ 508 vs. last week
Critical / high1,561▲ 84 vs. last week
New active exploitation (KEV)6▲ 1 vs. last week
Unscored (no CVSS)177▲ 6 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.8) | 0.34% | — | Sitetweet Project Sitetweet | 7/2/2024 | 6/17/2026 | The sitetweet WordPress plugin through 0.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack |