Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2983▼ 79 respecto a la semana anterior
Críticas / altas1412▲ 62 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
134 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.5) | 0.42% | 💥 PoC | Campcodes Online Learning Management System | 27/9/2025 | 17/6/2026 | A vulnerability was determined in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/add_content.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Online Learning Management System | 27/9/2025 | 17/6/2026 | A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_teacher.php. Performing manipulation of the argument department results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be… | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Online Learning Management System | 27/9/2025 | 17/6/2026 | A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of the file /admin/de_activate.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Online Learning Management System | 27/9/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function of the file /admin/teachers.php. The manipulation of the argument department results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and… | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Online Learning Management System | 27/9/2025 | 17/6/2026 | A vulnerability was identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /admin/edit_department.php. The manipulation of the argument d leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be… | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Online Learning Management System | 27/9/2025 | 17/6/2026 | A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/save_student.php. Executing manipulation of the argument class_id can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and… | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Online Learning Management System | 27/9/2025 | 30/9/2026 | A vulnerability was found in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/edit_student.php. Performing manipulation of the argument cys results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_user.php. Executing manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the… | |
| Modificada | Crítica (9.8) | 0.28% | — | Vibethemes Wordpress Learning Management System | 22/9/2025 | 17/6/2026 | Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970. | |
| Analizada | Media (5.5) | 0.68% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A vulnerability was detected in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/edit_user.php. Performing manipulation of the argument firstname results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may… | |
| Analizada | Media (5.5) | 0.56% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may… | |
| Analizada | Media (5.5) | 0.55% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_subject.php. The manipulation of the argument subject_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_subject.php. Executing manipulation of the argument subject_code can lead to sql injection. The attack may be performed from remote. The exploit has been… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument class_name results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_class.php. Such manipulation of the argument class_name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 1/9/2025 | 17/6/2026 | A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teacher_signup.php. Performing manipulation of the argument firstname results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Other… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 1/9/2025 | 17/6/2026 | A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /student_signup.php. The manipulation of the argument Username results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. | |
| Analizada | Media (5.5) | 0.41% | — | Campcodes Online Learning Management System | 1/9/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be… | |
| Analizada | Media (5.5) | 0.41% | — | Campcodes Online Learning Management System | 31/8/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and… | |
| Analizada | Alta (8.8) | 1.6% | — | Vibethemes Wordpress Learning Management System | 19/7/2025 | 17/6/2026 | The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account. | |
| Modificada | Media (5.4) | 0.26% | — | Beakon Learning Management System Sharable Content Object Reference Model | 17/7/2025 | 5/7/2026 | Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter | |
| Analizada | Crítica (9.8) | 0.70% | — | Beakon Learning Management System Sharable Content Object Reference Model | 23/6/2025 | 17/6/2026 | SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file | |
| Modificada | Crítica (9.3) | 0.68% | — | Vibethemes Wordpress Learning Management System | 31/12/2024 | 17/6/2026 | Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5. | |
| Modificada | Crítica (9.8) | 0.81% | — | Vibethemes Wordpress Learning Management System | 31/12/2024 | 17/6/2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentication Bypass.This issue affects WPLMS: from n/a through <= 1.9.9. | |
| Modificada | Crítica (9.8) | 0.63% | — | Vibethemes Wordpress Learning Management System | 31/12/2024 | 17/6/2026 | Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue affects WPLMS: from n/a through <= 1.9.9. |