Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2753▲ 33 respecto a la semana anterior

Críticas / altas1468▲ 334 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-11795	Aplazada	Media (5.3)	—	—	Softtr Informatics E-commerce Pack^AI	2/10/2026	2/10/2026	Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: through 2026-10-02. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-4378	Aplazada	Media (5.4)	0.23%	—	Akilli Ticaret Software Technologies LTD E-commerce Pack^AI	28/8/2026	2/9/2026	Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001.
CVE-2026-5218	Aplazada	Media (4.3)	0.28%	—	Softtr Informatics Technology Trading Limited E-commerce Pack^AI	27/8/2026	28/8/2026	Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting (XSS). This issue affects E-Commerce Pack: before 5.03.01.49.
CVE-2026-5219	Aplazada	Alta (8.3)	0.18%	—	Softtr Information Technology Trade LTD E-commerce Pack^AI	30/7/2026	31/7/2026	Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49.
CVE-2025-13004	Modificada	Media (6.3)	0.27%	—	Farktor E-commerce Package	12/2/2026	17/6/2026	Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Manipulating User-Controlled Variables. This issue affects E-Commerce Package: through 27112025.
CVE-2025-13002	Modificada	Media (6.1)	0.23%	—	Farktor E-commerce Package	12/2/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS). This issue affects E-Commerce Package: through 27112025.
CVE-2025-10969	Modificada	Crítica (9.8)	0.37%	—	Farktor E-commerce Package	12/2/2026	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection. This issue affects E-Commerce Package: through 27112025.