Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

106 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-4408	Modificada	Media (4.3)	0.38%	—	Designwall DW Question & Answer	12/7/2023	17/6/2026	The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce validation on the update_answer() function. This makes it possible for unauthenticated attackers to update answers to questions via a forged…
CVE-2023-2590	Modificada	Baja (3.5)	0.46%	—	Answer	9/5/2023	17/6/2026	Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.
CVE-2023-1976	Modificada	Alta (8.8)	0.61%	—	Answer	11/4/2023	17/6/2026	Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1975	Modificada	Media (6.5)	0.59%	—	Answer	11/4/2023	17/6/2026	Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.
CVE-2023-1974	Modificada	Media (6.5)	0.60%	—	Answer	11/4/2023	17/6/2026	Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.
CVE-2023-25992	Modificada	Media (4.8)	0.37%	—	Cminds CM Answers	23/3/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions.
CVE-2023-1543	Modificada	Alta (8.8)	0.78%	—	Answer	21/3/2023	17/6/2026	Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1542	Modificada	Media (5.4)	0.75%	—	Answer	21/3/2023	17/6/2026	Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1541	Modificada	Baja (3.8)	0.64%	—	Answer	21/3/2023	17/6/2026	Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1540	Modificada	Media (5.3)	0.64%	—	Answer	21/3/2023	17/6/2026	Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1539	Modificada	Media (5.3)	0.61%	—	Answer	21/3/2023	17/6/2026	Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1538	Modificada	Media (5.3)	0.64%	—	Answer	21/3/2023	17/6/2026	Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1537	Modificada	Crítica (9.8)	0.84%	—	Answer	21/3/2023	17/6/2026	Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1536	Modificada	Media (5.4)	0.52%	—	Answer	21/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
CVE-2023-1535	Modificada	Media (5.4)	0.54%	—	Answer	21/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
CVE-2023-1245	Modificada	Media (5.4)	0.52%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1244	Modificada	Media (5.4)	0.52%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1243	Modificada	Media (4.8)	0.53%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1242	Modificada	Media (5.4)	0.62%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1241	Modificada	Media (5.4)	0.62%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1240	Modificada	Media (5.4)	0.62%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1239	Modificada	Media (4.8)	0.53%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1238	Modificada	Media (5.4)	0.55%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-1237	Modificada	Media (5.4)	0.44%	—	Answer	7/3/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2023-0934	Modificada	Media (5.4)	0.39%	—	Answer	21/2/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.