Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2597▼ 310 respecto a la semana anterior

Críticas / altas1338▲ 74 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 463 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-25397	Aplazada	Alta (7.5)	0.43%	—	Snowray Software File Uploader FOR Woocommerce^AI	25/3/2026	17/6/2026	Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through <= 1.0.4.
CVE-2025-13329	Aplazada	Crítica (9.8)	0.73%	—	File Uploader FOR Woocommerce^AI	20/12/2025	17/6/2026	The File Uploader for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the callback function for the 'add-image-data' REST API endpoint in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to upload arbitrary…
CVE-2024-35636	Aplazada	Media (4.3)	0.17%	—	Uploadcare File Uploader^AI Uploadcare Adaptive Delivery^AI	1/6/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Uploadcare Uploadcare File Uploader and Adaptive Delivery (beta) uploadcare.This issue affects Uploadcare File Uploader and Adaptive Delivery (beta): from n/a through 3.0.11.
CVE-2023-23656	Aplazada	Crítica (10)	0.81%	—	Mainwp File Uploader Extension^AI	26/3/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in MainWP MainWP File Uploader Extension.This issue affects MainWP File Uploader Extension: from n/a through 4.1.
CVE-2023-4821	Modificada	Media (5.4)	0.45%	—	Codedropz Drag AND Drop Multiple File Uploader	16/10/2023	17/6/2026	The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts.
CVE-2022-40721	Modificada	Crítica (9.8)	1.4%	—	Creativedream File Uploader Project Creativedream File Uploader	3/10/2022	17/6/2026	Arbitrary file upload vulnerability in php uploader
CVE-2014-5324	Modificada	Media (6.5)	1.7%	—	Najeebmedia N-media File Uploader	26/9/2014	17/6/2026	Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP code by leveraging Author privileges to store a file.
CVE-2008-0373	Modificada	Alta (7.5)	2.2%	—	PHP F1 Maxs File Uploader	22/1/2008	16/6/2026	Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files.
CVE-2007-4327	Modificada	Media (6.8)	3.1%	—	Mapos Scripts File Uploader	14/8/2007	16/6/2026	Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php or (2) datei.php.