Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2557▼ 320 respecto a la semana anterior

Críticas / altas1342▲ 78 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-6462	Analizada	Media (5.4)	0.24%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup	29/6/2025	17/6/2026	The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode in all versions up to, and including, 5.25.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
CVE-2025-30788	Aplazada	Alta (8.2)	0.21%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup^AI	27/3/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows SQL Injection.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <= 5.25.08.
CVE-2025-30787	Aplazada	Alta (7.1)	0.18%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup^AI	27/3/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <= 5.25.08.
CVE-2025-26887	Aplazada	Media (6.5)	0.26%	—	Ieonly EZ SQL Reports Shortcode Widget AND DB Backup^AI	25/2/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through <= 5.21.35.