Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2811▲ 64 respecto a la semana anterior

Críticas / altas1484▲ 296 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)68▼ 448 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-51669	Modificada	Alta (8.8)	0.20%	—	Vivwebsolutions Dynamic Widgets	19/11/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Kalmang Dynamic Widgets dynamic-widgets.This issue affects Dynamic Widgets: from n/a through <= 1.6.4.
CVE-2015-10100	Modificada	Crítica (9.8)	1.1%	—	Vivwebsolutions Dynamic Widgets	10/4/2023	17/6/2026	A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress. This issue affects some unknown processing of the file classes/dynwid_class.php. The manipulation leads to sql injection. The attack may be initiated remotely. Upgrading to version 1.5.11 is able to…
CVE-2021-24933	Modificada	Media (5.4)	0.60%	—	Bootstrapped Dynamic Widgets	28/2/2022	17/6/2026	The Dynamic Widgets WordPress plugin through 1.5.16 does not escape the prefix parameter before outputting it back in an attribute when using the term_tree AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting issue
CVE-2015-9437	Modificada	Media (6.5)	0.88%	—	Vivwebsolutions Dynamic Widgets	26/9/2019	17/6/2026	The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.
CVE-2015-9436	Modificada	Media (5.4)	1.0%	—	Vivwebsolutions Dynamic Widgets	26/9/2019	17/6/2026	The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.