Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior
Críticas / altas1299▼ 202 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.6) | 0.50% | — | Ninjateam FastdupAI | 15/6/2026 | 17/6/2026 | Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. | |
| Aplazada | Alta (8.8) | 0.28% | — | Ninjateam FastdupAI | 12/2/2026 | 17/6/2026 | The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with Contributor-level access… | |
| Aplazada | Media (6.5) | 0.38% | — | Ninjateam FastdupAI | 6/1/2026 | 17/6/2026 | The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dir_path' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers, with… | |
| Modificada | Media (5.3) | 0.91% | 💥 Exploit | Ninjateam Fastdup | 16/1/2024 | 17/6/2026 | The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files. | |
| Modificada | Alta (7.5) | 0.48% | — | Ninjateam Fastdup | 8/1/2024 | 17/6/2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7. |