Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior

Críticas / altas1379▲ 45 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

12 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-57729	Aplazada	Alta (7.5)	0.39%	—	Uxthemes Flatsome^AI	13/7/2026	13/7/2026	Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.20.5.
CVE-2026-57728	Aplazada	Alta (7.1)	0.25%	—	Uxthemes Flatsome^AI	13/7/2026	13/7/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects Flatsome: from n/a through <= 3.20.5.
CVE-2026-57731	Aplazada	Media (6.5)	0.34%	—	Uxthemes Flatsome^AI	2/7/2026	2/7/2026	Contributor Broken Access Control in Flatsome <= 3.20.5 versions.
CVE-2026-57730	Aplazada	Media (4.3)	0.27%	—	Uxthemes Flatsome^AI	2/7/2026	2/7/2026	Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.
CVE-2026-31915	Aplazada	Media (5.3)	0.26%	—	Uxthemes Flatsome^AI	13/3/2026	17/6/2026	Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.19.6.
CVE-2026-28083	Aplazada	Media (6.5)	0.23%	—	Uxthemes Flatsome^AI	26/2/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.5.
CVE-2025-8684	Aplazada	Media (6.4)	0.20%	—	Uxthemes Flatsome^AI	5/9/2025	17/6/2026	The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access…
CVE-2024-5881	Aplazada	Media (6.4)	0.29%	—	Webico Slider Flatsome Addons^AI	9/7/2024	17/6/2026	The Webico Slider Flatsome Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wbc_image shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…
CVE-2024-5346	Modificada	Media (5.4)	0.26%	—	Uxthemes Flatsome	22/6/2024	17/6/2026	The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the UX Countdown, Video Button, UX Video, UX Slider, UX Sidebar, and UX Payment Icons shortcodes in all versions up to, and including, 3.18.7 due to insufficient input sanitization and output escaping on user supplied attributes. This…
CVE-2024-5156	Aplazada	Media (6.4)	0.27%	—	Uxthemes Flatsome^AI	20/6/2024	17/6/2026	The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.18.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level…
CVE-2023-40555	Modificada	Crítica (9.8)	0.60%	—	Uxthemes Flatsome	20/12/2023	17/6/2026	Deserialization of Untrusted Data vulnerability in UX-themes Flatsome \| Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome \| Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5.
CVE-2023-28994	Modificada	Media (6.1)	0.41%	—	Uxthemes Flatsome	23/8/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin <= 3.16.8 versions.