Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-50031	Aplazada	Media (6.5)	0.32%	—	Syedamirhussain91 DB Backup^AI	14/8/2025	17/6/2026	Missing Authorization vulnerability in syedamirhussain91 DB Backup db-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DB Backup: from n/a through <= 6.0.
CVE-2025-6462	Analizada	Media (5.4)	0.24%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup	29/6/2025	17/6/2026	The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode in all versions up to, and including, 5.25.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
CVE-2025-30788	Aplazada	Alta (8.2)	0.21%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup^AI	27/3/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows SQL Injection.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <= 5.25.08.
CVE-2025-30787	Aplazada	Alta (7.1)	0.18%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup^AI	27/3/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <= 5.25.08.
CVE-2025-26887	Aplazada	Media (6.5)	0.26%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup^AI	25/2/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <= 5.21.35.
CVE-2014-10076	Modificada	Alta (7.5)	2.4%	—	Wp-db-backup Project Wp-db-backup	5/10/2018	17/6/2026	The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack.
CVE-2014-9119	Modificada	Media (5)	16%	💥 Exploit	DB Backup Project DB Backup	31/12/2014	17/6/2026	Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVE-2006-4208	Modificada	Media (5)	12%	💥 Exploit	Skippy.net Wp-db Backup Plugin FOR Wordpress	17/8/2006	16/6/2026	Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.