Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3027▼ 69 respecto a la semana anterior

Críticas / altas1424▲ 58 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

93 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-65579	Aplazada	Crítica (9.8)	0.56%	—	Axiomthemes Agricola^AI	6/8/2026	12/8/2026	Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
CVE-2026-57738	Aplazada	Crítica (9.8)	0.56%	—	Axiomthemes 777 Triple-seven^AI	13/7/2026	13/7/2026	Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1.13.0.
CVE-2025-69369	Aplazada	Alta (8.1)	0.33%	—	Axiomthemes Racquet^AI	2/6/2026	22/7/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This issue affects Racquet: from n/a through 1.12.0.
CVE-2025-58897	Aplazada	Alta (8.1)	0.34%	—	Axiomthemes Fermentio^AI PHP^AI	2/6/2026	22/7/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion. This issue affects Fermentio: from n/a through 1.5.0.
CVE-2025-58707	Aplazada	Alta (8.1)	0.34%	—	Axiomthemes Spin^AI PHP^AI	2/6/2026	22/7/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion. This issue affects Spin: from n/a through 1.8.
CVE-2025-58705	Aplazada	Alta (8.1)	0.41%	—	Axiomthemes Crafti^AI	2/6/2026	22/7/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti: from n/a through 1.12.
CVE-2025-53440	Aplazada	Alta (8.1)	0.41%	—	Axiomthemes Confidant^AI	2/6/2026	22/7/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Confidant: from n/a through 1.4.
CVE-2026-22500	Aplazada	Crítica (9.8)	0.51%	—	Axiomthemes M2 Construction AND Tools Store^AI	25/3/2026	17/6/2026	Deserialization of Untrusted Data vulnerability in axiomthemes m2 \| Construction and Tools Store m2-ce allows Object Injection.This issue affects m2 \| Construction and Tools Store: from n/a through <= 1.1.2.
CVE-2026-28129	Aplazada	Alta (8.1)	0.58%	—	Axiomthemes Little Birdies^AI PHP^AI	5/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local File Inclusion.This issue affects Little Birdies: from n/a through <= 1.3.16.
CVE-2026-28119	Aplazada	Alta (8.1)	0.58%	—	Axiomthemes Nirvana^AI	5/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through <= 2.6.
CVE-2026-28118	Aplazada	Alta (8.1)	0.58%	—	Axiomthemes Welldone^AI	5/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusion.This issue affects Welldone: from n/a through <= 2.4.
CVE-2026-28117	Aplazada	Alta (8.1)	0.58%	—	Axiomthemes Smart SEO^AI	5/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9.
CVE-2026-28079	Aplazada	Alta (8.1)	0.58%	—	Axiomthemes Conquerors^AI	5/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File Inclusion.This issue affects Conquerors: from n/a through <= 1.2.13.
CVE-2026-28024	Aplazada	Alta (8.1)	0.58%	—	Axiomthemes Helion^AI	5/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through <= 1.1.12.
CVE-2026-27326	Aplazada	Alta (8.1)	0.58%	—	Axiomthemes AC Services^AI	5/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes AC Services \| HVAC, Air Conditioning & Heating Company WordPress Theme window-ac-services allows PHP Local File Inclusion.This issue affects AC Services \| HVAC, Air Conditioning &…
CVE-2026-27098	Aplazada	Alta (8.1)	0.49%	—	Axiomthemes AU Pair Agency^AI	5/3/2026	17/6/2026	Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au Pair Agency - Babysitting & Nanny Theme: from n/a through <= 1.2.2.
CVE-2026-22501	Aplazada	Crítica (9.8)	0.53%	—	Axiomthemes Mounthood^AI	5/3/2026	17/6/2026	Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2.
CVE-2026-22475	Aplazada	Crítica (9.8)	0.40%	—	Axiomthemes Estate^AI	5/3/2026	17/6/2026	Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.
CVE-2026-22370	Aplazada	Alta (8.1)	0.42%	—	Axiomthemes Marveland^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through <= 1.3.0.
CVE-2026-22368	Aplazada	Alta (8.1)	0.42%	—	Axiomthemes Redy^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This issue affects Redy: from n/a through <= 1.0.2.
CVE-2026-22366	Aplazada	Alta (8.1)	0.52%	—	Axiomthemes Jude^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Jude jude allows PHP Local File Inclusion.This issue affects Jude: from n/a through <= 1.3.0.
CVE-2026-22365	Aplazada	Alta (8.1)	0.42%	—	Axiomthemes Soleng^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleng soleng allows PHP Local File Inclusion.This issue affects Soleng: from n/a through <= 1.0.5.
CVE-2026-22364	Aplazada	Alta (8.1)	0.42%	—	Axiomthemes Seventrees^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes SevenTrees seventrees allows PHP Local File Inclusion.This issue affects SevenTrees: from n/a through <=1.0.2.
CVE-2026-22363	Aplazada	Alta (8.1)	0.53%	—	Axiomthemes Rhodos^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rhodos rhodos allows PHP Local File Inclusion.This issue affects Rhodos: from n/a through <= 1.3.3.
CVE-2026-22362	Aplazada	Alta (8.1)	0.42%	—	Axiomthemes Photolia^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Photolia photolia allows PHP Local File Inclusion.This issue affects Photolia: from n/a through <= 1.0.3.