The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have b
The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and exp
A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have result
Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that
Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application i
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter
Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they s
In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration
The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
The SocialV - Social Network and Community BuddyPress Theme theme for WordPress is vulnerable to unauthorized access of
The ShopSite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.
The DSGVO All in one for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and
The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vu
Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disab
Improper Export of Android Application Components in Settings prior to SMR Feb-2025 Release 1 allows local attackers to
Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to r
Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memo
Improper access control in Media Controller prior to version 1.0.24.5282 allows local attacker to launch activities in M
Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bou
Out-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to write out-of-b
Improper access control in PushNotification prior to version 13.0.00.15 in Android 12, 14.0.00.7 in Android 13, and 15.1
Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across
Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0
Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to acces
Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multi
Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the conf
Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute
Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 a
Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows lo
Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attack
Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privile
Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memor
Improper access control in Samsung Message prior to SMR Jan-2025 Release 1 allows physical attackers to access data acro
Improper access control in SoundPicker prior to SMR Jan-2025 Release 1 allows physical attackers to access data across m
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions u
The Medical Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions u
The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'b
The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticat
The Banner Garden Plugin for WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting i
The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the
The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and escape a parameter before outputting it back
The Giga Messenger WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in
The Musicbox WordPress plugin through 2.0.3 does not sanitise and escape a parameter before outputting it back in the pa
The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the p
The Glossy WordPress plugin through 2.3.5 does not sanitise and escape a parameter before outputting it back in the page
The WP Projects Portfolio with Client Testimonials WordPress plugin through 3.0 does not have CSRF check in some places,
The WP Projects Portfolio with Client Testimonials WordPress plugin through 3.0 does not sanitise and escape a parameter
Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a ma
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymo
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 169,588 CVE records rated MEDIUM in our database. Of these, 103 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started