Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2586▼ 299 respecto a la semana anterior

Críticas / altas1355▲ 100 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-30751	Modificada	Media (4.8)	0.37%	—	Icontrolwp Article Directory Redux	14/8/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <= 1.0.2 versions.
CVE-2023-0422	Modificada	Media (4.8)	0.47%	—	Article Directory Project Article Directory	10/4/2023	17/6/2026	The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts.
CVE-2017-15960	Modificada	Crítica (9.8)	2.1%	—	Yourarticlesdirectory Article Directory Script	29/10/2017	17/6/2026	Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.
CVE-2010-4905	Modificada	Alta (7.5)	1.0%	—	Softbizscripts Article Directory Script	8/10/2011	16/6/2026	SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter.
CVE-2009-2397	Modificada	Media (5)	2.9%	—	Audioarticledirectory Audio Article Directory	9/7/2009	16/6/2026	Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.
CVE-2009-2236	Modificada	Alta (7.5)	0.97%	—	Yourarticlesdirectory Your Articles Directory	27/6/2009	16/6/2026	SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter. NOTE: some of these details are obtained from third party information.
CVE-2009-2235	Modificada	Alta (7.5)	0.96%	—	Yourarticlesdirectory Your Articles Directory	27/6/2009	16/6/2026	SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-4007	Modificada	Alta (9.3)	3.5%	—	Article Directory	26/7/2007	16/6/2026	PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.