Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-25465	Aplazada	Media (6.5)	0.22%	—	Codepeople CP Multi View Event Calendar^AI	25/3/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Stored XSS.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.36.
CVE-2025-58009	Aplazada	Baja (3.8)	0.31%	—	Codepeople CP Multi View Event Calendar^AI	22/9/2025	17/6/2026	Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.35.
CVE-2023-23814	Aplazada	Baja (3.8)	0.47%	—	Codepeople CP Multi View Event Calendar^AI	9/12/2024	17/6/2026	Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through 1.4.13.
CVE-2023-28492	Aplazada	Media (4.3)	0.31%	—	Codepeople CP Multi View Event Calendar^AI	3/6/2024	17/6/2026	Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10.
CVE-2014-8586	Modificada	Alta (7.5)	40%	💥 Exploit	CP Multi View Event Calendar Project CP Multi View Event Calendar	4/11/2014	17/6/2026	SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.