Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2722▼ 518 respecto a la semana anterior
Críticas / altas1296▼ 206 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior
–

3237 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaMedia (6.5)0.33%—Woocommerce Anti FraudAI17/6/202617/6/2026
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.
AplazadaMedia (6.5)0.33%—Opmc Woocommerce DropshippingAI17/6/202617/6/2026
Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.
AplazadaCrítica (9.9)0.48%—Ecommerce ZoneAI17/6/202617/6/2026
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.
AplazadaCrítica (9.8)0.56%—Woocommerce Product FiltersAI17/6/202617/6/2026
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
AplazadaAlta (8.5)0.35%—Effress Woocommerce Frontend Manager UltimateAI17/6/202617/6/2026
Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.
AplazadaAlta (7.5)0.47%—Woocommerce Book PriceAI17/6/202617/6/2026
Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.
AplazadaMedia (6.2)0.26%—SimplcommerceAI17/6/202617/6/2026
Stored cross-site scripting (XSS) in NewsItemApiController In SimplCommerce prior to commit 6142d3b5 allows an authenticated administrator to execute arbitrary JavaScript via the ShortContent and FullContent fields, which are stored without HTML sanitization and rendered unencoded via @Html.Raw()
AplazadaAlta (7.5)0.47%—Wordpress Woocommerce ScraperAI17/6/20266/10/2026
Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.
AplazadaCrítica (10)0.43%—Wordpress Woocommerce ScraperAI17/6/20266/10/2026
Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.
AplazadaAlta (7.5)0.39%—Woosolutions Woocommerce POSAI16/6/202617/6/2026
Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.
AplazadaMedia (6.5)0.40%—Woocommerce Stripe Payment GatewayAI16/6/202617/6/2026
The WooCommerce Stripe Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_pay_for_order()` function in all versions up to, and including, 10.7.0 This is due to a missing order ownership or order_key verification when processing payment…
AplazadaAlta (7.5)0.42%—Signature Addon FOR WoocommerceAI15/6/202617/6/2026
Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions.
AplazadaCrítica (9.3)0.40%—Implecode Ecommerce Product CatalogAI15/6/202617/6/2026
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
AplazadaAlta (8.2)0.34%—Hippoo Mobile APP FOR WoocommerceAI15/6/202617/6/2026
Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions.
AplazadaAlta (7.5)0.50%—WPC Product Options FOR WoocommerceAI15/6/202617/6/2026
Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions.
AplazadaAlta (7.5)0.42%—Wpcloud Woocommerce PDF Invoices Packing Slips Delivery Notes AND Shipping LabelsAI15/6/202617/6/2026
Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions.
AplazadaAlta (7.5)0.35%—Webtoffee WPC Product Bundles FOR WoocommerceAI15/6/202617/6/2026
Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions.
AplazadaAlta (7.5)0.35%—Montonio FOR WoocommerceAI15/6/202617/6/2026
Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions.
AplazadaAlta (7.5)0.48%—Omnisend Email Marketing FOR WoocommerceAI15/6/202617/6/2026
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
AplazadaAlta (7.5)0.35%—Redsys Woocommerce LightAI15/6/202617/6/2026
Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions.
AplazadaCrítica (9.8)0.54%—Datalogics Ecommerce DeliveryAI15/6/202617/6/2026
Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.
AplazadaMedia (6.5)0.22%—Shipment Tracker FOR WoocommerceAI15/6/202617/6/2026
Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions.
AplazadaAlta (7.2)0.54%—Wpdesk Woocommerce PDF Invoices Packing SlipsAI15/6/202617/6/2026
Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions.
AplazadaAlta (7.1)0.25%—Wcproducttable Woocommerce Product Table LiteAI15/6/202617/6/2026
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 4.6.3 versions.
AplazadaCrítica (10)0.56%—Rednao Woocommerce PDF Invoice BuilderAI15/6/202617/6/2026
Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion. This issue affects WooCommerce PDF Invoice Builder: from n/a through 2.0.8.