Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3006▼ 69 respecto a la semana anterior
Críticas / altas1420▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.2) | 3.6% | — | Blocksy Companion PROAI | 8/7/2026 | 8/7/2026 | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Advanced Reviews feature. Attackers can exploit the Custom… | |
| Aplazada | Media (5.3) | 0.31% | — | Blocksy Companion PROAI | 26/6/2026 | 26/6/2026 | Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions. | |
| Aplazada | Alta (8.5) | 0.58% | — | Blocksy Companion PROAI | 26/6/2026 | 26/6/2026 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions. | |
| Aplazada | Crítica (9.9) | 0.79% | — | Blocksy Companion PROAI | 17/6/2026 | 17/6/2026 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions. | |
| Aplazada | Crítica (9.3) | 0.40% | — | Blocksy Companion PROAI | 17/6/2026 | 17/6/2026 | Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. |