Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2684▼ 80 respecto a la semana anterior
Críticas / altas1442▲ 302 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.9) | 0.73% | — | Wpbackitup WP BackitupAI | 10/9/2026 | 10/9/2026 | The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backup_file' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on… | |
| Aplazada | Media (6.5) | 0.37% | — | Chris Simmons WP BackitupAI | 22/1/2026 | 17/6/2026 | Missing Authorization vulnerability in Chris Simmons WP BackItUp wp-backitup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP BackItUp: from n/a through <= 2.1.0. | |
| Analizada | Alta (8.6) | 0.29% | — | Nero Backitup | 14/11/2025 | 17/6/2026 | Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (CWE-22) that, in combination with Windows ShellExecuteW fallback extension resolution, leads to arbitrary code execution when a user clicks a crafted entry. By creating a trailing-dot folder and placing a same-basename script,… | |
| Aplazada | Media (5.3) | 0.38% | — | Wpbackitup Backup AND RestoreAI | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Backup and Restore WordPress: from n/a through 1.50. | |
| Aplazada | Media (5.4) | 0.32% | — | Wpbackitup Backup AND RestoreAI | 1/11/2024 | 17/6/2026 | Access Control vulnerability in WPBackItUp Backup and Restore WordPress allows . This issue affects Backup and Restore WordPress: from n/a through 1.50. | |
| Analizada | Media (4.3) | 0.18% | — | Wpbackitup Backup AND Restore Wordpress | 26/8/2024 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in WPBackItUp Backup and Restore WordPress.This issue affects Backup and Restore WordPress: from n/a through 1.50. | |
| Analizada | Media (5.3) | 0.56% | — | Wpbackitup Backup AND Restore Wordpress | 26/3/2024 | 17/6/2026 | The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data |