Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

28 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-3977	Modificada	Media (4.3)	0.61%	—	Backupbliss Backup Migration Backupbliss Clone Copy-delete-posts Duplicate Post Inisev Enhanced Text Widget+6	28/7/2023	17/6/2026	Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for unauthenticated attackers…
CVE-2023-0958	Modificada	Media (6.5)	0.69%	—	Backupbliss Backup Migration Backupbliss Clone Copy-delete-posts Duplicate Post Inisev Enhanced Text Widget+7	28/7/2023	17/6/2026	Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions,…
CVE-2021-36884	Modificada	Media (5.4)	0.57%	—	Backupbliss Backup Migration	19/11/2021	17/6/2026	Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions.