Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior

Críticas / altas1259▼ 239 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior

35 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-46351	Modificada	Crítica (9.8)	0.52%	—	Mypresta Manufacturers (brands) Images Block	19/1/2024	17/6/2026	In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The methods `mib::getManufacturersByCategory()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVE-2023-32746	Modificada	Media (5.4)	0.38%	—	Woocommerce Brands	30/8/2023	17/6/2026	Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.45 versions.
CVE-2023-35880	Modificada	Alta (8.8)	0.26%	—	Woocommerce Brands	17/7/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions.
CVE-2023-23667	Modificada	Media (5.4)	0.36%	—	Berocket Brands FOR Woocommerce	18/5/2023	17/6/2026	Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in BeRocket Brands for WooCommerce plugin <= 3.7.0.6 versions.
CVE-2022-47437	Modificada	Media (4.8)	0.37%	—	WSB Brands Project WSB Brands	8/5/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Branko Borilovic WSB Brands plugin <= 1.1.8 versions.
CVE-2023-26865	Modificada	Crítica (9.8)	1.2%	—	Brandsdistribution Bdroppy	24/4/2023	17/6/2026	SQL injection vulnerability found in PrestaShop bdroppy v.2.2.12 and before allowing a remote attacker to gain privileges via the BdroppyCronModuleFrontController::importProducts component.
CVE-2022-23982	Modificada	Alta (7.5)	1.2%	—	Quadlayers Perfect Brands FOR Woocommerce	18/2/2022	17/6/2026	The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server information exposure.
CVE-2022-23981	Modificada	Media (4.3)	0.63%	—	Quadlayers Perfect Brands FOR Woocommerce	18/2/2022	17/6/2026	The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4).
CVE-2021-40825	Modificada	Alta (8.6)	1.1%	—	Acuitybrands Nlight Eclypse System Controller Firmware	17/9/2021	17/6/2026	nLight ECLYPSE (nECY) system Controllers running software prior to 1.17.21245.754 contain a default key vulnerability. The nECY does not force a change to the key upon the initial configuration of an affected device. nECY system controllers utilize an encrypted channel to secure SensorViewTM configuration and…
CVE-2019-16251	Modificada	Media (4.3)	0.95%	—	Yithemes Yith Woocommerce Wishlist Yithemes Yith Woocommerce Compare Yithemes Yith Woocommerce Quick View Yithemes Yith Woocommerce Zoom Magnifier+34	31/10/2019	17/6/2026	plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.