Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3020▼ 63 respecto a la semana anterior
Críticas / altas1413▲ 57 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
3236 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Baja (3.7) | 0.14% | — | Robokassa Payment Gateway FOR WoocommerceAI | 17/9/2026 | 18/9/2026 | The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred-payment feature is enabled, allowing unauthenticated attackers to forge a notification and mark arbitrary WooCommerce orders as paid or on-hold… | |
| Aplazada | Media (4.3) | 0.14% | — | Active Woot Products Tables FOR WoocommerceAI | 17/9/2026 | 18/9/2026 | The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation and CSRF checks in some of its AJAX actions, allowing any authenticated users, such as subscriber, to change the title of arbitrary posts, pages and products. | |
| Aplazada | Baja (3.7) | 0.26% | — | Event Booking Manager FOR WoocommerceAI | 17/9/2026 | 18/9/2026 | The Event Booking Manager for WooCommerce WordPress plugin before 5.3.8 does not perform an ownership or authorization check before rendering booking confirmation details, allowing unauthenticated attackers to retrieve registered attendees' personal information (full name, email address, phone number, and custom… | |
| Aplazada | Media (4.3) | 0.17% | — | Subscriptions FOR WoocommerceAI | 16/9/2026 | 17/9/2026 | The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making. | |
| Aplazada | Media (5.3) | 0.34% | — | Subscriptions FOR WoocommerceAI | 16/9/2026 | 17/9/2026 | The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users to retrieve the store's full list of subscriptions, including customer usernames, product names, recurring amounts and payment dates. | |
| Aplazada | Media (5.3) | 0.39% | — | NI Woocommerce Sales ReportAI | 16/9/2026 | 17/9/2026 | The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and to search the store's… | |
| Aplazada | Alta (8.6) | 0.45% | — | NI Woocommerce Sales ReportAI | 16/9/2026 | 17/9/2026 | The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks. | |
| Aplazada | Alta (8.1) | 0.37% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (7.5) | 0.32% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (8.1) | 0.37% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (8.1) | 0.37% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (8.1) | 0.37% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (7.8) | 0.16% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle… | |
| Aplazada | Alta (7.8) | 0.12% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search… | |
| Aplazada | Alta (7.8) | 0.16% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search… | |
| Aplazada | Alta (8.1) | 0.37% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (8.1) | 0.37% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (7.5) | 0.31% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (7) | 0.12% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where… | |
| Aplazada | Alta (7.7) | 0.34% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 17/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… | |
| Aplazada | Alta (7.1) | 0.40% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 21/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (7) | 0.28% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 21/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Media (6.5) | 0.34% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 21/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Commerce Guided… | |
| Aplazada | Media (6.5) | 0.33% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 21/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided… | |
| Aplazada | Alta (8.2) | 0.43% | — | Oracle Commerce Guided SearchAIOracle Commerce Experience ManagerAI | 15/9/2026 | 21/9/2026 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided… |