Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior

Críticas / altas1385▲ 153 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-31409	Aplazada	Media (6.5)	0.29%	—	Qodeinteractive Bridge Core^AI	1/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bridge Core allows Stored XSS. This issue affects Bridge Core: from n/a through n/a.
CVE-2025-24744	Aplazada	Media (4.3)	0.24%	—	Qodeinteractive Bridge Core^AI	27/1/2025	17/6/2026	Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3.
CVE-2024-9860	Aplazada	Media (5.4)	0.32%	—	Qodeinteractive Bridge Core^AI	12/10/2024	17/6/2026	The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the 'import_action' and 'install_plugin_per_demo' functions in versions up to, and including, 3.3. This makes it possible for authenticated attackers with subscriber-level…
CVE-2024-9292	Aplazada	Media (6.4)	0.29%	—	Qodeinteractive Bridge Core^AI	8/10/2024	17/6/2026	The Bridge Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formforall' shortcode in versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and…
CVE-2023-40333	Modificada	Media (6.1)	0.38%	—	Qodeinteractive Bridge Core	27/9/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Qode Interactive Bridge Core plugin <= 3.0.9 versions.