Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

54 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-4501	Modificada	Media (6.5)	0.72%	—	Topdigitaltrends Mega Addons FOR Wpbakery Page Builder	14/12/2022	17/6/2026	The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin's settings.
CVE-2022-36798	Modificada	Alta (8.8)	0.36%	—	Topdigitaltrends Mega Addons FOR Wpbakery Page Builder	23/9/2022	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin <= 4.2.7 at WordPress.
CVE-2021-24244	Modificada	Media (6.5)	0.94%	—	Wpbakery Page Builder Clipboard Project Wpbakery Page Builder Clipboard	6/5/2021	17/6/2026	An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
CVE-2021-24243	Modificada	Media (5.4)	0.70%	—	Wpbakery Page Builder Clipboard Project Wpbakery Page Builder Clipboard	6/5/2021	17/6/2026	An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend pages.