Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

30 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-24622	Modificada	Media (4.8)	0.64%	—	Emarketdesign Customer Service Software & Support Ticket System	18/10/2021	17/6/2026	The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2016-11012	Modificada	Media (5.4)	0.78%	—	Solaplugins Sola Support Tickets	20/9/2019	17/6/2026	The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS.
CVE-2018-6007	Modificada	Alta (8.8)	2.3%	💥 Exploit	Joomsky JS Support Ticket	29/1/2018	17/6/2026	CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.
CVE-2015-7670	Modificada	Crítica (9.8)	3.1%	—	Support Ticket System Project Support Ticket System	26/9/2017	17/6/2026	Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter.
CVE-2005-4264	Modificada	Alta (7.5)	1.3%	—	Triangle Solutions PHP Support Tickets	15/12/2005	16/6/2026	Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.