Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2722▼ 518 respecto a la semana anterior

Críticas / altas1296▼ 206 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior

402.866 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-42415	Aplazada	Crítica (9.3)	0.25%	—	Porto^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
CVE-2026-42414	Aplazada	Alta (8.5)	0.29%	—	Cridio Listingpro^AI	6/10/2026	6/10/2026	Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
CVE-2026-42413	Aplazada	Alta (7.5)	0.32%	—	Snapshotify^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions.
CVE-2026-41562	Aplazada	Alta (7.5)	0.32%	—	Norvis Backup^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.
CVE-2026-41561	Aplazada	Alta (7.5)	0.32%	—	Museder Restoreone^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.
CVE-2026-41560	Aplazada	Alta (7.5)	0.30%	—	WXD Backup Lite^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.
CVE-2026-41559	Aplazada	Alta (7.5)	0.32%	—	Safesnap^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions.
CVE-2026-41555	Aplazada	Crítica (9.3)	0.25%	—	User Subscriptions Form^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.
CVE-2026-40807	Aplazada	Alta (7.1)	0.19%	—	CF7 Views^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.
CVE-2026-40806	Aplazada	Alta (7.1)	0.19%	—	Blog Posts AND Category Filter FOR Elementor^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
CVE-2026-39798	Aplazada	Media (6.5)	0.25%	—	Themetechmount Truebooker^AI	6/10/2026	6/10/2026	Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.
CVE-2026-39797	Aplazada	Crítica (9.8)	0.34%	—	Data443 Gdpr Framework^AI	6/10/2026	6/10/2026	Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
CVE-2026-39796	Aplazada	Alta (7.5)	0.30%	—	Advanced Posts Listing^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.
CVE-2026-39795	Aplazada	Crítica (9.3)	0.33%	—	Sendpress Newsletters^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.
CVE-2026-39794	Aplazada	Alta (7.5)	0.39%	—	Wclovers Woocommerce Multivendor Marketplace^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.
CVE-2026-39793	Aplazada	Alta (8.8)	0.42%	—	Simple JWT Login^AI	6/10/2026	6/10/2026	Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.
CVE-2026-39792	Aplazada	Alta (8.6)	0.36%	—	Simplefilelist Simple File List^AI	6/10/2026	6/10/2026	Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.
CVE-2026-39791	Aplazada	Media (5.3)	0.25%	—	Mailjet Email Marketing^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.
CVE-2026-39790	Aplazada	Alta (7.1)	0.25%	—	E4jconnect Vikrentcar^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.
CVE-2026-39788	Aplazada	Media (6.5)	0.22%	—	Frontend PM^AI	6/10/2026	6/10/2026	Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.
CVE-2026-39787	Aplazada	Media (6.5)	0.29%	—	10web Social Photo Feed^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.
CVE-2026-39785	Aplazada	Crítica (9.3)	0.25%	—	Gmedia Photo Gallery^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
CVE-2026-39784	Aplazada	Alta (7.1)	0.19%	—	Nicdark Hotel Booking^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.
CVE-2026-39781	Aplazada	Alta (7.1)	0.19%	—	Document Gallery^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions.
CVE-2026-39780	Aplazada	Alta (7.1)	0.19%	—	Kainelabs Youzify^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.