Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-1810	Modificada	Media (6.1)	0.37%	—	Ericteubert Archivist	24/2/2024	17/6/2026	The Archivist – Custom Archive Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘shortcode_attributes' parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
CVE-2023-46194	Modificada	Media (6.1)	0.29%	—	Ericteubert Archivist - Custom Archive Templates	27/10/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.5 versions.
CVE-2023-25448	Modificada	Alta (8.8)	0.25%	—	Archivist Project Archivist	22/5/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.
CVE-2023-25490	Modificada	Media (4.8)	0.37%	—	Archivist - Custom Archive Templates Project Archivist - Custom Archive Templates	25/4/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.
CVE-2021-42552	Modificada	Media (6.1)	0.67%	—	Archivistabox	16/3/2022	17/6/2026	Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I.