Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior
Críticas / altas1458▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.8) | 0.44% | — | Abandonedcartpro Abandoned Cart PROAI | 5/9/2026 | 8/9/2026 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcap_save_connector_settings, wcap_send_manual_email,… | |
| Aplazada | Crítica (9.8) | 0.48% | — | Abandonedc Abandoned Cart PROAI | 20/8/2026 | 20/8/2026 | Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. | |
| Aplazada | Alta (8.8) | 0.42% | — | Wptools Abandoned Cart PROAI | 26/6/2026 | 26/6/2026 | Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. | |
| Aplazada | Alta (8.8) | 0.55% | — | Tychesoftwares Abandoned Cart PRO FOR WoocommerceAI | 10/6/2025 | 17/6/2026 | The Abandoned Cart Pro for WooCommerce plugin contains an authenticated arbitrary file upload vulnerability due to missing file type validation in the wcap_add_to_cart_popup_upload_files function in all versions up to, and including, 9.16.0. This makes it possible for an authenticated attacker, with subscriber-level… | |
| Modificada | Media (6.1) | 1.4% | 💥 Exploit | Tychesoftwares Abandoned Cart Lite FOR WoocommerceTychesoftwares Abandoned Cart PRO FOR Woocommerce | 22/6/2023 | 17/6/2026 | The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping. This makes it possible… |