Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.2) | 3.6% | — | Blocksy Companion PROAI | 8/7/2026 | 8/7/2026 | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Advanced Reviews feature. Attackers can exploit the Custom… | |
| Aplazada | Crítica (10) | 0.86% | — | Blocksy Companion PROAI | 2/7/2026 | 2/7/2026 | Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions. | |
| Aplazada | Media (5.3) | 0.31% | — | Blocksy Companion PROAI | 26/6/2026 | 26/6/2026 | Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions. | |
| Aplazada | Alta (8.5) | 0.58% | — | Blocksy Companion PROAI | 26/6/2026 | 26/6/2026 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions. | |
| Aplazada | Crítica (9.9) | 0.79% | — | Blocksy Companion PROAI | 17/6/2026 | 17/6/2026 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions. | |
| Aplazada | Crítica (9.3) | 0.40% | — | Blocksy Companion PROAI | 17/6/2026 | 17/6/2026 | Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. |