Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

30 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-38070	Modificada	Alta (8.8)	0.98%	—	Mypopups Pop-up	9/9/2022	17/6/2026	Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress.
CVE-2022-2305	Modificada	Media (4.8)	0.61%	—	Timersys Popups	1/8/2022	17/6/2026	The WordPress Popup WordPress plugin through 1.9.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2022-1776	Modificada	Media (5.4)	0.60%	—	Icegram Popups, Welcome Bar, Optins AND Lead Generation Plugin	27/6/2022	17/6/2026	The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.1.8 does not sanitize and escape some campaign parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
CVE-2021-24631	Modificada	Alta (8.8)	1.6%	—	Unlimited Popups Project Unlimited Popups	8/11/2021	17/6/2026	The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection
CVE-2008-6264	Modificada	Alta (7.5)	1.0%	💥 Exploit	E-topbiz Slide Popups	24/2/2009	16/6/2026	SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.