Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2851▼ 221 respecto a la semana anterior

Críticas / altas1332▼ 167 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)222▼ 99 respecto a la semana anterior

403.376 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-48199	Aplazada	Alta (7.5)	0.39%	—	Sermone^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.
CVE-2026-48197	Aplazada	Alta (7.2)	0.46%	—	Publishpress Capabilities^AI	6/10/2026	6/10/2026	Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
CVE-2026-42638	Aplazada	Alta (7.5)	0.26%	—	Easydigitaldownloads Easy Digital Downloads^AI	6/10/2026	7/10/2026	Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1.
CVE-2026-42637	Aplazada	Media (6.5)	0.33%	—	Payplug FOR Woocommerce^AI	6/10/2026	6/10/2026	Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
CVE-2026-42636	Aplazada	Alta (7.1)	0.25%	—	WP Cookie Notice^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.
CVE-2026-42635	Aplazada	Alta (7.1)	0.25%	—	WPG Demos Woocommerce Simple Auctions^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions.
CVE-2026-42634	Aplazada	Alta (7.1)	0.25%	—	Video Background Block^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions.
CVE-2026-42418	Aplazada	Alta (7.1)	0.25%	—	Wpsocialrocket Social Rocket^AI	6/10/2026	7/10/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.5.
CVE-2026-42417	Aplazada	Crítica (9.3)	0.33%	—	Armember Premium^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.
CVE-2026-42416	Aplazada	Alta (8.5)	0.29%	—	Udesign Core^AI	6/10/2026	6/10/2026	Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.
CVE-2026-42415	Aplazada	Crítica (9.3)	0.25%	—	Porto^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
CVE-2026-42414	Aplazada	Alta (8.5)	0.29%	—	Cridio Listingpro^AI	6/10/2026	6/10/2026	Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
CVE-2026-42413	Aplazada	Alta (7.5)	0.32%	—	Snapshotify^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions.
CVE-2026-41562	Aplazada	Alta (7.5)	0.32%	—	Norvis Backup^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.
CVE-2026-41561	Aplazada	Alta (7.5)	0.32%	—	Museder Restoreone^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.
CVE-2026-41560	Aplazada	Alta (7.5)	0.30%	—	WXD Backup Lite^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.
CVE-2026-41559	Aplazada	Alta (7.5)	0.32%	—	Safesnap^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions.
CVE-2026-41555	Aplazada	Crítica (9.3)	0.25%	—	User Subscriptions Form^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.
CVE-2026-40807	Aplazada	Alta (7.1)	0.19%	—	CF7 Views^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.
CVE-2026-40806	Aplazada	Alta (7.1)	0.19%	—	Blog Posts AND Category Filter FOR Elementor^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
CVE-2026-39798	Aplazada	Media (6.5)	0.25%	—	Themetechmount Truebooker^AI	6/10/2026	6/10/2026	Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.
CVE-2026-39797	Aplazada	Crítica (9.8)	0.34%	—	Data443 Gdpr Framework^AI	6/10/2026	6/10/2026	Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
CVE-2026-39796	Aplazada	Alta (7.5)	0.30%	—	Advanced Posts Listing^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.
CVE-2026-39795	Aplazada	Crítica (9.3)	0.33%	—	Sendpress Newsletters^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.
CVE-2026-39794	Aplazada	Alta (7.5)	0.39%	—	Wclovers Woocommerce Multivendor Marketplace^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.