Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

12 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-68006	Aplazada	Media (6.5)	0.41%	—	Deetronix Booking Ultra PRO^AI	22/1/2026	17/6/2026	Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through <= 1.1.23.
CVE-2025-58633	Aplazada	Media (6.5)	0.17%	—	Deetronix Booking Ultra PRO^AI	3/9/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through <= 1.1.21.
CVE-2025-30637	Aplazada	Media (5.9)	0.26%	—	Deetronix Booking Ultra PRO^AI	6/6/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through <= 1.1.20.
CVE-2025-27345	Aplazada	Alta (7.1)	0.29%	—	Deetronix Booking Ultra PRO^AI	17/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a through <= 1.1.19.
CVE-2023-32601	Aplazada	Media (5.4)	0.48%	—	Booking Ultra PRO^AI	13/12/2024	17/6/2026	Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Ultra Pro: from n/a through 1.1.12.
CVE-2024-38676	Aplazada	Media (6.5)	0.32%	—	Booking Ultra PRO^AI	20/7/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Ultra Pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through 1.1.13.
CVE-2024-38717	Aplazada	Alta (7.1)	0.45%	—	Booking Ultra PRO^AI	12/7/2024	17/6/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue affects Booking Ultra Pro: from n/a through 1.1.13.
CVE-2024-32960	Aplazada	Alta (8.8)	0.45%	—	Booking Ultra PRO^AI	17/5/2024	17/6/2026	Improper Privilege Management vulnerability in Booking Ultra Pro allows Privilege Escalation.This issue affects Booking Ultra Pro: from n/a through 1.1.12.
CVE-2023-32511	Modificada	Media (6.1)	0.38%	—	Bookingultrapro Booking Ultra PRO Appointments Booking Calendar	24/8/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.8 versions.
CVE-2022-46816	Modificada	Alta (8.8)	0.26%	—	Bookingultrapro Booking Ultra PRO Appointments Booking Calendar	24/5/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.4 versions.
CVE-2021-36855	Modificada	Media (6.1)	0.27%	—	Bookingultrapro Booking Ultra PRO Appointments Booking Calendar	30/9/2022	17/6/2026	Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.
CVE-2021-36854	Modificada	Alta (8.8)	0.34%	—	Bookingultrapro Booking Ultra PRO Appointments Booking Calendar	30/9/2022	17/6/2026	Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.