Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2634▼ 301 respecto a la semana anterior

Críticas / altas1351▲ 82 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)58▼ 469 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-26731	Aplazada	Media (6.5)	0.22%	—	Reputeinfosystems Arprice^AI	27/3/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARPrice arprice allows Stored XSS.This issue affects ARPrice: from n/a through <= 4.1.3.
CVE-2024-49700	Aplazada	Alta (7.1)	0.31%	—	Reputeinfosystems Arprice^AI	21/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARPrice arprice allows Reflected XSS.This issue affects ARPrice: from n/a through <= 4.1.3.
CVE-2024-49699	Aplazada	Alta (8.8)	0.79%	—	Reputeinfosystems Arprice^AI	21/1/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through <= 4.1.3.
CVE-2024-49688	Aplazada	Crítica (9.8)	0.46%	—	Reputeinfosystems Arprice^AI	21/1/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through <= 4.1.3.
CVE-2024-49666	Aplazada	Alta (8.5)	0.37%	—	Reputeinfosystems Arprice^AI	21/1/2025	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARPrice arprice allows SQL Injection.This issue affects ARPrice: from n/a through <= 4.1.3.
CVE-2024-49655	Aplazada	Crítica (9.3)	0.36%	—	Reputeinfosystems Arprice^AI	21/1/2025	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARPrice arprice allows SQL Injection.This issue affects ARPrice: from n/a through <= 4.1.3.
CVE-2019-14679	Modificada	Media (6.5)	0.69%	—	Reputeinfosystems Arprice Lite	8/8/2019	17/6/2026	core/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arplite_import_export CSRF.