Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.25% | — | GeekybotAI | 13/8/2026 | 14/8/2026 | Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions. | |
| Aplazada | Alta (7.5) | 0.43% | — | Geekybot Geeky BOTAI | 31/7/2026 | 26/8/2026 | The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to retrieve chat-history session metadata including WordPress usernames, user IDs, and timestamps. | |
| Aplazada | Crítica (9.3) | 0.40% | — | GeekybotAI | 2/7/2026 | 2/7/2026 | Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions. | |
| Aplazada | Crítica (10) | 0.52% | — | GeekybotAI | 15/6/2026 | 17/6/2026 | Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions. | |
| Aplazada | Crítica (9.3) | 0.40% | — | GeekybotAI | 15/6/2026 | 17/6/2026 | Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions. | |
| Aplazada | Crítica (9.8) | 0.82% | — | Geekybot Geeky BOTAI | 5/5/2026 | 17/6/2026 | The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route allowing attacker-controlled model/function dispatch and reaching a plugin installer helper that downloads and unzips attacker-supplied ZIP files into… | |
| Aplazada | Alta (7.5) | 0.46% | — | GeekybotAI | 5/5/2026 | 17/6/2026 | The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to SQL Injection via the 'attributekey' parameter in versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL… | |
| Aplazada | Alta (7.2) | 0.28% | — | GeekybotAI | 14/1/2026 | 17/6/2026 | The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the chat message field in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated… |