Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.2) | 0.30% | — | Wptools Extra Product OptionsAI | 30/9/2026 | 30/9/2026 | Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions. | |
| Aplazada | Alta (7.5) | 0.50% | — | Webtoffee Extra Product Options AND ADD ONS FOR WoocommerceAI | 18/8/2026 | 20/8/2026 | Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions. | |
| Aplazada | Alta (7.5) | 0.45% | — | Webtoffee Extra Product Options Builder FOR WoocommerceAI | 16/8/2026 | 26/8/2026 | The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to a customer-uploaded file before serving it, allowing unauthenticated users who obtain a file's stored name to retrieve it. The Extra Product Options Builder for WooCommerce WordPress… | |
| Aplazada | Media (6.5) | 0.33% | — | Edgarrojas Extra Product Options Builder FOR WoocommerceAI | 13/7/2026 | 13/7/2026 | Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCommerce additional-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extra Product Options Builder for WooCommerce: from n/a through <= 1.2.167. | |
| Aplazada | Media (6.1) | 0.40% | — | Rednao Extra Product Options BuilderAI | 24/10/2024 | 17/6/2026 | The Extra Product Options Builder for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'RednaoSerializedFields' parameter during the creation of a signature file in all versions up to, and including, 1.2.133 due to insufficient input sanitization and output escaping. This makes it… | |
| Modificada | Alta (8.8) | 0.32% | — | Actpro Extra Product Options FOR Woocommerce | 10/6/2024 | 17/6/2026 | Missing Authorization vulnerability in actpro Extra Product Options for WooCommerce.This issue affects Extra Product Options for WooCommerce: from n/a through 3.0.6. | |
| Aplazada | Media (4.3) | 0.20% | — | Rednao Extra Product Options Builder FOR WoocommerceAI | 15/4/2024 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in RedNao Extra Product Options Builder for WooCommerce.This issue affects Extra Product Options Builder for WooCommerce: from n/a through 1.2.104. | |
| Modificada | Media (4.8) | 0.42% | — | Actpro Extra Product Options FOR Woocommerce | 14/11/2023 | 17/6/2026 | Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in actpro Extra Product Options for WooCommerce plugin <= 3.0.3 versions. |