Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-12083	Aplazada	Alta (8.1)	0.47%	—	Admin AND Site Enhancements PRO^AI Wpase Admin AND Site Enhancements^AI	6/7/2026	6/7/2026	The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or nonce checks on a role-restoration request handler, allowing unauthenticated attackers to restore a previously demoted administrator account…
CVE-2026-57625	Aplazada	Crítica (9.6)	0.45%	—	Admin AND Site Enhancements PRO^AI	2/7/2026	2/7/2026	Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions.
CVE-2024-43333	Aplazada	Alta (7.5)	0.44%	—	Notfound Admin AND Site Enhancements PRO^AI	3/2/2025	17/6/2026	Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Privilege Escalation. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through 7.6.2.1.