Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

91 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-53420	Modificada	Alta (7.1)	0.25%	—	Vibethemes Wordpress Learning Management System	22/10/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8.
CVE-2025-49925	Modificada	Alta (7.5)	0.36%	—	Vibethemes Wordpress Learning Management System	22/10/2025	17/6/2026	Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.
CVE-2025-58668	Modificada	Crítica (9.8)	0.28%	—	Vibethemes Wordpress Learning Management System	22/9/2025	17/6/2026	Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.
CVE-2025-55996	Analizada	Media (6.3)	0.19%	💥 PoC	Rakuten Viber	12/9/2025	17/6/2026	Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface
CVE-2025-9172	Aplazada	Alta (7.5)	0.43%	💥 PoC	Vibes^AI	26/8/2025	17/6/2026	The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated…
CVE-2015-10139	Analizada	Alta (8.8)	1.6%	—	Vibethemes Wordpress Learning Management System	19/7/2025	17/6/2026	The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account.
CVE-2025-32493	Aplazada	Media (5.9)	0.36%	—	Vibethemes BP Social Connect^AI	9/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through <= 1.6.2.
CVE-2024-12457	Aplazada	Media (6.4)	0.31%	—	Viber Chat Support^AI	7/1/2025	17/6/2026	The Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping on user supplied…
CVE-2024-56045	Modificada	Crítica (9.3)	0.68%	—	Vibethemes Wordpress Learning Management System	31/12/2024	17/6/2026	Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.
CVE-2024-56044	Modificada	Crítica (9.8)	0.81%	—	Vibethemes Wordpress Learning Management System	31/12/2024	17/6/2026	Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentication Bypass.This issue affects WPLMS: from n/a through <= 1.9.9.
CVE-2024-56043	Modificada	Crítica (9.8)	0.63%	—	Vibethemes Wordpress Learning Management System	31/12/2024	17/6/2026	Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue affects WPLMS: from n/a through <= 1.9.9.
CVE-2024-56040	Aplazada	Crítica (9.8)	0.76%	—	Vibethemes Vibebp^AI	31/12/2024	17/6/2026	Incorrect Privilege Assignment vulnerability in VibeThemes VibeBP vibebp allows Privilege Escalation.This issue affects VibeBP: from n/a through <= 1.9.9.4.1.
CVE-2024-56046	Modificada	Crítica (9.8)	0.76%	—	Vibethemes Wordpress Learning Management System	31/12/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through <= 1.9.9.
CVE-2024-56042	Modificada	Crítica (9.8)	0.70%	—	Vibethemes Wordpress Learning Management System	31/12/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.
CVE-2024-56041	Aplazada	Alta (8.5)	0.49%	—	Vibethemes Vibebp^AI	31/12/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.5.1.
CVE-2024-56039	Aplazada	Crítica (9.3)	0.61%	—	Vibethemes Vibebp^AI	31/12/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.7.7.
CVE-2024-56057	Modificada	Alta (8.8)	0.56%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56055	Modificada	Alta (8.8)	0.48%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56054	Modificada	Alta (8.8)	0.58%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56053	Modificada	Alta (8.8)	0.44%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.
CVE-2024-56052	Modificada	Alta (8.8)	0.69%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56051	Modificada	Alta (8.8)	0.46%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Code Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.
CVE-2024-56050	Modificada	Alta (8.8)	0.69%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.3.
CVE-2024-56049	Modificada	Alta (8.5)	0.47%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56048	Modificada	Alta (8.8)	0.60%	—	Vibethemes Wordpress Learning Management System	18/12/2024	17/6/2026	Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.