Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior

Críticas / altas1381▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-27890	Modificada	Media (5.4)	0.64%	—	Export User Project Export User	14/4/2023	17/6/2026	The Export User plugin through 2.0 for MyBB allows XSS during the process of an admin generating DSGVO data for a user, via the Custom User Title, Location, or Bio field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2022-3558	Modificada	Alta (8)	1.1%	—	Codection Import AND Export Users AND Customers	7/11/2022	17/6/2026	The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
CVE-2022-1255	Modificada	Media (4.8)	0.71%	—	Codection Import AND Export Users AND Customers	2/5/2022	17/6/2026	The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues
CVE-2021-24451	Modificada	Alta (7.2)	1.4%	—	Export Users With Meta Project Export Users With Meta	6/7/2021	17/6/2026	The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.
CVE-2020-22277	Modificada	Alta (8)	1.8%	—	Codection Import AND Export Users AND Customers	4/11/2020	17/6/2026	Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.
CVE-2020-9466	Modificada	Media (6.1)	1.3%	—	Export Users TO CSV Project Export Users TO CSV	28/2/2020	17/6/2026	The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection.
CVE-2018-15571	Modificada	Alta (8.6)	1.5%	—	Export Users TO CSV Project Export Users TO CSV	28/8/2018	17/6/2026	The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection.