Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior

Críticas / altas1376▼ 50 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-57698	Aplazada	Media (6.5)	0.36%	—	Villatheme Abandoned Cart Recovery FOR Woocommerce^AI	13/7/2026	13/7/2026	Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Abuse.This issue affects Abandoned Cart Recovery for WooCommerce: from n/a through <= 1.1.12.
CVE-2026-32526	Aplazada	Alta (7.1)	0.25%	—	Villatheme Abandoned Cart Recovery FOR Woocommerce^AI	25/3/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Stored XSS.This issue affects Abandoned Cart Recovery for WooCommerce: from n/a through <= 1.1.10.
CVE-2021-4395	Modificada	Media (6.5)	0.43%	—	Villatheme Abandoned Cart Recovery FOR Woocommerce	1/7/2023	17/6/2026	The Abandoned Cart Recovery for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the get_items() and extra_tablenav() functions. This makes it possible for unauthenticated attackers to perform…
CVE-2022-47449	Modificada	Media (6.1)	0.38%	—	Rextheme Cart Lift - Abandoned Cart Recovery FOR Woocommerce AND EDD	4/5/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin <= 3.1.5 versions.