Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-32600	Modificada	Media (5.4)	0.39%	—	Rankmath SEO	6/8/2023	17/6/2026	Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rank Math SEO plugin <= 1.0.119 versions.
CVE-2023-32800	Modificada	Media (6.1)	0.38%	—	Rankmath SEO PRO	28/5/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in One Rank Math SEO PRO plugin <= 3.0.35 versions.
CVE-2022-36376	Modificada	Crítica (9.8)	0.99%	—	Rankmath SEO	9/9/2022	17/6/2026	Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress.
CVE-2020-11515	Modificada	Media (6.1)	2.1%	💥 Exploit	Rankmath SEO	7/4/2020	17/6/2026	The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new…
CVE-2020-11514	Modificada	Crítica (9.8)	9.1%	💥 Exploit	Rankmath SEO	7/4/2020	17/6/2026	The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.
CVE-2019-14786	Modificada	Media (6.5)	1.4%	—	Rankmath SEO	15/8/2019	17/6/2026	The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter.