Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2841▼ 157 respecto a la semana anterior
Críticas / altas1370▲ 51 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.5) | 0.43% | — | Dokan PROAI | 23/7/2026 | 23/7/2026 | Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions. | |
| Aplazada | Alta (7.1) | 0.29% | — | Wedevs Dokan PROAI | 23/7/2026 | 23/7/2026 | Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions. | |
| Aplazada | Alta (7.5) | 0.40% | — | Dokan PROAI | 23/7/2026 | 23/7/2026 | Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions. | |
| Aplazada | Alta (7.1) | 0.25% | — | Wedevs Dokan PROAI | 23/7/2026 | 21/9/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7. | |
| Aplazada | Crítica (9.8) | 0.48% | — | Dokan PROAI | 26/6/2026 | 26/6/2026 | Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions. | |
| Aplazada | Media (6.5) | 0.38% | — | Dokan PROAI | 25/6/2026 | 26/6/2026 | The Dokan Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ’orderby’ parameter in all versions up to, and including, 5.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated… | |
| Aplazada | Alta (7.5) | 0.46% | — | Dokan PROAI | 25/6/2026 | 29/6/2026 | The Dokan Pro plugin for WordPress is vulnerable to time-based SQL Injection via the via 'latitude' and 'longitude' parameters in all versions up to, and including, 5.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for… | |
| Aplazada | Media (6.5) | 0.15% | — | Dokan PROAI | 5/1/2026 | 30/9/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan Dokan Pro allows Stored XSS.This issue affects Dokan Pro: from n/a through 3.14.5. | |
| Aplazada | Alta (8.8) | 0.44% | — | Wedevs Dokan PROAI | 26/8/2025 | 17/6/2026 | The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5. This is due to the plugin not properly validating a user's identity prior to updating their password during a staff password reset. This makes it possible for authenticated… |