Vulnerabilities
Summary — last 7 days
New vulnerabilities5,226▲ 2,447 vs. last week
Critical / high2,947▲ 1,608 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)223▲ 49 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (4.3) | 0.18% | — | Wp-vipergb WP VipergbAI | 5/24/2024 | 6/17/2026 | The WP-ViperGB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers to change the plugin's settings via a forged request… | |
| Modified | Medium (6.1) | 1.00% | — | Wp-vipergb Project Wp-vipergb | 8/28/2019 | 6/17/2026 | The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460. | |
| Modified | Medium (6.8) | 1.2% | — | Justin Klein Wp-vipergb | 1/2/2015 | 6/17/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in the WP-ViperGB plugin before 1.3.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) vgb_page… |