Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior

Críticas / altas1376▼ 50 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-57404	Aplazada	Media (6.5)	0.33%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	13/7/2026	13/7/2026	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.9.
CVE-2026-23972	Aplazada	Media (6.5)	0.30%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	25/3/2026	17/6/2026	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.0.
CVE-2025-69328	Aplazada	Alta (8.8)	0.36%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	20/2/2026	17/6/2026	Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9.
CVE-2025-64266	Aplazada	Alta (8.8)	0.43%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	18/12/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4.
CVE-2025-49904	Aplazada	Alta (7.1)	0.21%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	6/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3.
CVE-2025-47585	Aplazada	Media (6.5)	0.28%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	2/6/2025	17/6/2026	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.8.
CVE-2025-39390	Aplazada	Media (5.3)	0.33%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	24/4/2025	17/6/2026	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.6.
CVE-2025-27011	Aplazada	Alta (7.5)	0.64%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	15/4/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows PHP Local File Inclusion.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.
CVE-2025-22720	Aplazada	Media (5.8)	0.33%	—	Magepeopleteam Booking AND Rental Manager FOR Woocommerce^AI	31/1/2025	17/6/2026	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.1.