Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-93771	Aplazada	Alta (7.2)	0.37%	—	Wpfactory Cost OF Goods FOR Woocommerce^AI	30/9/2026	30/9/2026	Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.
CVE-2026-7613	Aplazada	Alta (7.2)	0.32%	—	Pixelyoursite Cost OF Goods^AI	20/5/2026	23/7/2026	The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up to, and including, 1.2.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
CVE-2026-6962	Aplazada	Media (6.4)	0.33%	—	Algoritmika Cost OF Goods Product Cost Profit Calculator^AI	13/5/2026	17/6/2026	The Cost of Goods: Product Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_cog_product_cost' and 'alg_wc_cog_product_profit' shortcodes in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output…
CVE-2025-48240	Aplazada	Media (6.5)	0.26%	—	Wpfactory Cost OF Goods FOR Woocommerce^AI	19/5/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Cost of Goods for WooCommerce cost-of-goods-for-woocommerce allows Stored XSS.This issue affects Cost of Goods for WooCommerce: from n/a through <= 3.7.0.
CVE-2025-32207	Aplazada	Media (6.5)	0.40%	—	Anzar Ahmed NI Woocommerce Cost OF Goods^AI	4/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooCommerce Cost Of Goods: from n/a through <= 3.2.8.
CVE-2025-31826	Aplazada	Media (5.4)	0.45%	—	NI Woocommerce Cost OF Goods^AI	1/4/2025	17/6/2026	Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Cost Of Goods: from n/a through <= 3.2.8.
CVE-2023-23868	Aplazada	Media (5.4)	0.64%	—	Wpfactory Cost OF Goods FOR Woocommerce^AI	9/12/2024	17/6/2026	Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost of Goods for WooCommerce: from n/a through 2.8.6.
CVE-2024-53783	Aplazada	Alta (7.6)	0.49%	—	Anzar Ahmed NI NI Woocommerce Cost OF Goods^AI	30/11/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods.This issue affects Ni WooCommerce Cost Of Goods: from n/a through <= 3.2.8.
CVE-2024-0821	Modificada	Media (6.1)	0.40%	—	Wpfactory Cost OF Goods FOR Woocommerce	29/2/2024	17/6/2026	The Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'section' parameter in all versions up to, and including, 3.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…