Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2532▼ 361 respecto a la semana anterior

Críticas / altas1338▲ 69 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-8703	Aplazada	Media (6.4)	0.32%	—	Endless Scroll^AI	27/5/2026	17/6/2026	The Endless Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject…
CVE-2026-25332	Aplazada	Media (5.3)	0.28%	—	Fahadmahmood Endless Posts Navigation^AI	19/2/2026	17/6/2026	Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through <= 2.2.9.
CVE-2024-49629	Modificada	Media (6.1)	0.17%	—	Androidbubbles Endless Posts Navigation	20/10/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through <= 2.2.7.
CVE-2008-0231	Modificada	Alta (7.5)	2.5%	—	Tuned Studios Classic Theme Tuned Studios Endless Tuned Studios Freeze Theme Tuned Studios Lonely Maple+3	11/1/2008	16/6/2026	Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page parameter.…