Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2693▼ 76 respecto a la semana anterior
Críticas / altas1446▲ 304 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.3) | 0.29% | — | BookticsAI | 11/9/2026 | 11/9/2026 | Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions. | |
| Aplazada | Media (5.3) | 0.24% | — | BookticsAI | 11/9/2026 | 11/9/2026 | The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the create_order_permission() permission callback on the POST /wp-json/booktics/v1/orders REST route… | |
| Aplazada | Alta (8.5) | 0.36% | — | Arraytics BookticsAI | 13/8/2026 | 14/8/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22. | |
| Aplazada | Crítica (9.8) | 0.56% | — | BookticsAI | 2/7/2026 | 2/7/2026 | Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions. | |
| Aplazada | Media (5.3) | 0.26% | — | Arraytics BookticsAI | 8/4/2026 | 24/7/2026 | Missing Authorization vulnerability in Arraytics Booktics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Booktics: from n/a through 1.0.16. | |
| Aplazada | Media (5.3) | 0.23% | — | BookticsAI | 10/3/2026 | 17/6/2026 | The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'Extension_Controller::update_item_permissions_check' function in all versions up to, and including, 1.0.16. This makes it possible… | |
| Aplazada | Media (5.3) | 0.26% | — | BookticsAI | 10/3/2026 | 17/6/2026 | The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to query… |