Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior
Críticas / altas1299▼ 202 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
64 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.96% | — | Gvectors Wpforo Forum | 17/11/2022 | 17/6/2026 | Auth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress. | |
| Modificada | Alta (8.8) | 0.47% | — | Gvectors Wpforo Forum | 17/11/2022 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress. | |
| Modificada | Media (5.4) | 0.28% | — | Gvectors Wpforo Forum | 8/11/2022 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion. | |
| Modificada | Media (4.3) | 0.50% | — | Gvectors Wpforo Forum | 8/11/2022 | 17/6/2026 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public. | |
| Modificada | Media (4.3) | 0.53% | — | Gvectors Wpforo Forum | 8/11/2022 | 17/6/2026 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved. | |
| Modificada | Alta (8.8) | 0.51% | — | Gvectors Wpforo Forum | 9/9/2022 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress. | |
| Modificada | Media (6.1) | 2.9% | 💥 Exploit | Gvectors Wpforo Forum | 6/7/2021 | 17/6/2026 | The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login. Such issue could allow an attacker to induce a user to use a login URL redirecting to a website under their control and being a replica… | |
| Modificada | Media (6.1) | 0.93% | — | Gvectors Wpforo | 15/6/2020 | 17/6/2026 | The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php. | |
| Modificada | Media (6.1) | 0.93% | — | Gvectors Wpforo | 15/6/2020 | 17/6/2026 | The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter. | |
| Modificada | Media (4.8) | 0.71% | — | Gvectors Wpforo | 15/6/2020 | 17/6/2026 | The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter. | |
| Modificada | Alta (8.8) | 0.71% | — | Gvectors Wpforo | 15/6/2020 | 17/6/2026 | The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF. | |
| Modificada | Crítica (9.8) | 2.7% | — | Gvectors Wpforo Forum | 19/6/2019 | 17/6/2026 | An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the forum administrator without any form of user interaction. | |
| Modificada | Media (6.1) | 3.6% | 💥 Exploit | Gvectors Wpforo Forum | 4/6/2018 | 17/6/2026 | wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI. | |
| Modificada | Crítica (9.8) | 1.6% | — | Gvectors Wpforo | 28/5/2018 | 17/6/2026 | The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter. |