Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 211 respecto a la semana anterior

Críticas / altas1376▲ 147 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-28187	Aplazada	Alta (7.1)	0.25%	—	Knowledge Base FOR Documentation Faqs With AI Assistance^AI	13/8/2026	14/8/2026	Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions.
CVE-2026-25402	Aplazada	Media (4.3)	0.19%	—	Echoplugins Knowledge Base FOR Documentation Faqs With AI Assistance^AI	19/2/2026	17/6/2026	Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through <= 16.011.0.
CVE-2025-8686	Aplazada	Media (6.4)	0.31%	—	WP Easy Faqs^AI	11/9/2025	17/6/2026	The WP Easy FAQs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's WP_EASY_FAQ shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with…
CVE-2025-23795	Aplazada	Media (6.5)	0.37%	—	Ghuger Easy-faqs^AI	16/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ghuger Easy FAQs easy-faqs allows Stored XSS.This issue affects Easy FAQs: from n/a through <= 3.2.1.
CVE-2024-56033	Aplazada	Alta (7.1)	0.26%	—	Think201 Faqs^AI	2/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs allows Reflected XSS.This issue affects FAQs: from n/a through <= 1.0.2.
CVE-2024-54246	Aplazada	Media (6.5)	0.39%	—	Think201 Faqs^AI	13/12/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs allows Stored XSS.This issue affects FAQs: from n/a through <= 1.0.2.
CVE-2024-24842	Aplazada	Alta (8.7)	0.46%	—	Echo Plugins Knowledge Base FOR Documentation Faqs With AI Assistance^AI	27/3/2024	17/6/2026	Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Documentation, FAQs with AI Assistance.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through 11.30.2.
CVE-2010-1529	Modificada	Alta (7.5)	1.1%	—	Freestyle Faqs Lite	26/4/2010	16/6/2026	SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq action to index.php.
CVE-2005-3882	Modificada	Alta (7.5)	1.1%	—	Faqsystems Faqring Knowledge Base Software	29/11/2005	16/6/2026	SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.