Vulnerabilities
Summary — last 7 days
New vulnerabilities3,142▲ 572 vs. last week
Critical / high1,455▲ 57 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)301▲ 287 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (4.3) | 3.2% | 💥 Exploit | Video-lead-form Uk-cookie | 12/11/2012 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter in a video-lead-form action to wp-admin/admin.php. | |
| Modified | Medium (4.3) | 1.9% | — | Uk-cookie Project Uk-cookie | 11/17/2012 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in the Uk Cookie (aka uk-cookie) plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |