Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2534▼ 399 respecto a la semana anterior
Críticas / altas1321▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)96▼ 431 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Baja (2.1) | 0.83% | — | Wangyunf Blossom | 17/2/2026 | 17/6/2026 | A flaw has been found in Blossom up to 1.17.1. This issue affects the function put of the file blossom-backend/common/common-iaas/src/main/java/com/blossom/common/iaas/blos/BLOSManager.java of the component File Upload. This manipulation causes path traversal. The attack may be initiated remotely. The exploit has been… | |
| Analizada | Baja (2) | 0.36% | — | Wangyunf Blossom | 17/2/2026 | 17/6/2026 | A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects the function content of the file blossom-backend/backend/src/main/java/com/blossom/backend/server/article/draft/ArticleController.java of the component Article Title Handler. The manipulation results in cross site scripting. The attack… | |
| Modificada | Alta (8.8) | 0.20% | — | Blossomthemes Blossom Shop | 2/1/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through <= 1.1.7. | |
| Modificada | Media (4.3) | 0.18% | — | Blossomthemes Vandana | 2/1/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Vandana Lite vandana-lite allows Cross Site Request Forgery.This issue affects Vandana Lite: from n/a through <= 1.1.9. | |
| Modificada | Alta (8.8) | 0.21% | — | Blossomthemes Vilva | 2/1/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Vilva vilva allows Cross Site Request Forgery.This issue affects Vilva: from n/a through <= 1.2.2. | |
| Aplazada | Media (4.3) | 0.37% | — | Blossomthemes Email NewsletterAI | 9/12/2024 | 17/6/2026 | Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes Email Newsletter: from n/a through <= 2.2.4. | |
| Analizada | Crítica (9.8) | 0.28% | — | Blossomthemes Email Newsletter | 26/6/2024 | 17/6/2026 | Server-Side Request Forgery (SSRF) vulnerability in Blossom Themes BlossomThemes Email Newsletter.This issue affects BlossomThemes Email Newsletter: from n/a through 2.2.6. | |
| Modificada | Alta (8.8) | 0.23% | — | Blossomthemes Sarada | 15/4/2024 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Blossom Themes Sarada Lite.This issue affects Sarada Lite: from n/a through 1.1.2. | |
| Modificada | Alta (7.5) | 0.47% | — | Blossomthemes Blossom SPA | 12/3/2024 | 17/6/2026 | The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.3 via generated source. This makes it possible for unauthenticated attackers to extract sensitive data including contents of password-protected or scheduled posts. | |
| Modificada | Media (5.4) | 0.51% | — | Blossomthemes Blossom Recipe Maker | 23/9/2022 | 17/6/2026 | Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Blossom Recipe Maker plugin <= 1.0.7 at WordPress. |