Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior
Críticas / altas1294▼ 196 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
574 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.5) | 0.49% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/product_update.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.45% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/product_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.5) | 0.56% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receipt_credit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.56% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprint_cash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.49% | — | Campcodes Sales AND Inventory System | 12/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.45% | — | Campcodes Sales AND Inventory System | 12/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/product_add.php. The manipulation of the argument prod_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.45% | — | Campcodes Sales AND Inventory System | 8/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customer_account.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.50% | — | Campcodes Sales AND Inventory System | 1/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/payment_add.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to… | |
| Analizada | Media (5.5) | 0.47% | — | Campcodes Sales AND Inventory System | 20/6/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/cat_update.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.46% | — | Campcodes Sales AND Inventory System | 20/6/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/cat_add.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.46% | — | Campcodes Sales AND Inventory System | 20/6/2025 | 17/6/2026 | A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/cash_transaction.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to… | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Sales AND Inventory System | 20/6/2025 | 17/6/2026 | A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/account_add.php. The manipulation of the argument id/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to… | |
| Aplazada | Alta (7.1) | 0.34% | — | Saleswonder Team Wp2leadsAI | 17/6/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through <= 3.5.0. | |
| Aplazada | Alta (7.5) | 0.44% | — | Salesforce OmnistudioAI | 10/6/2025 | 17/6/2026 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. This impacts OmniStudio: before version 254. | |
| Aplazada | Alta (7.5) | 0.43% | — | Salesforce OmnistudioAI | 10/6/2025 | 17/6/2026 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025. | |
| Aplazada | Media (5.3) | 0.42% | — | Salesforce OmnistudioAI | 10/6/2025 | 17/6/2026 | Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check. This impacts OmniStudio: before Spring 2025 | |
| Aplazada | Crítica (9.1) | 0.49% | — | Salesforce OmnistudioAI | 10/6/2025 | 17/6/2026 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025 | |
| Aplazada | Alta (7.5) | 0.44% | — | Salesforce OmnistudioAI | 10/6/2025 | 17/6/2026 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025 | |
| Aplazada | Alta (7.1) | 0.21% | — | Salesup2019 Formulario DE Contacto SalesupAI | 9/6/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in salesup2019 Formulario de contacto SalesUp! formularios-de-contacto-salesup allows Reflected XSS.This issue affects Formulario de contacto SalesUp!: from n/a through <= 1.0.14. | |
| Aplazada | Media (4.7) | 0.31% | — | Crmperks WP Gravity Forms SalesforceAI | 6/6/2025 | 17/6/2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.4.7. | |
| Aplazada | Media (5.3) | 0.31% | — | Integration FOR Salesforce AND Contact Form 7 Wpforms Elementor Formidable Ninja FormsAI | 30/5/2025 | 17/6/2026 | The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used… | |
| Aplazada | Media (6.1) | 0.34% | — | Affiliate Sales IN Google Analytics AND Other ToolsAI | 21/5/2025 | 17/6/2026 | The Affiliate Sales in Google Analytics and other tools plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.0.0. This is due to insufficient validation on the redirect url supplied via the 'afflink' parameter. This makes it possible for unauthenticated attackers to redirect… | |
| Aplazada | Crítica (9.3) | 0.34% | — | Comerzzia Backoffice Sales OrchestratorAI | 20/5/2025 | 17/6/2026 | SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘uidActivity’, ‘codCompany’ and ‘uidInstance’ parameters of the ‘/comerzzia/login’ endpoint. | |
| Analizada | Media (6.9) | 0.54% | — | Campcodes Sales AND Inventory System | 18/5/2025 | 17/6/2026 | A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and… | |
| Analizada | Media (6.9) | 0.54% | — | Campcodes Sales AND Inventory System | 18/5/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transaction_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to… |