Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior
Críticas / altas1352▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.3) | 0.28% | — | Coolplugins Elementor Contact Form DBAI | 19/2/2026 | 17/6/2026 | Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Contact Form DB: from n/a through <= 2.1.3. | |
| Modificada | Media (6.1) | 0.62% | — | Webacetechs Contact Form DB - Elementor | 15/8/2022 | 17/6/2026 | The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting | |
| Modificada | Media (6.5) | 0.90% | — | Sean-barton Elementor Contact Form DB | 12/1/2021 | 17/6/2026 | The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages. | |
| Modificada | Media (6.8) | 1.5% | — | Cfdbplugin Contact Form DB | 9/3/2015 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8.32 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete all plugin records via a request in the CF7DBPluginSubmissions… | |
| Modificada | Media (4.3) | 1.6% | — | Cfdbplugin Contact Form DB | 20/2/2015 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit_time parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php. | |
| Modificada | Media (4.3) | 2.0% | — | Cfdbplugin Contact Form DB | 10/10/2014 | 17/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8.16 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) form or (2) enc parameter in the CF7DBPluginShortCodeBuilder page to… |