Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2535▼ 358 respecto a la semana anterior
Críticas / altas1338▲ 66 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
22 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.5) | 0.36% | — | Kamleshyadav Miraculous CoreAI | 25/3/2026 | 17/6/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through < 2.1.2. | |
| Aplazada | Alta (7.5) | 0.41% | — | Kamleshyadav MiraculousAI | 25/3/2026 | 17/6/2026 | Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.1.2. | |
| Aplazada | Alta (7.1) | 0.26% | — | Kamleshyadav WP Bakery Autoresponder AddonAI | 5/3/2026 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Stored XSS.This issue affects WP Bakery Autoresponder Addon: from n/a through <= 1.0.6. | |
| Aplazada | Media (6.5) | 0.34% | — | Kamleshyadav WP Bakery Autoresponder AddonAI | 5/3/2026 | 17/6/2026 | Missing Authorization vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bakery Autoresponder Addon: from n/a through <= 1.0.6. | |
| Aplazada | Alta (8.8) | 0.37% | — | Kamleshyadav Miraculous ElementorAI | 20/2/2026 | 17/6/2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in kamleshyadav Miraculous Elementor miraculous-el allows Authentication Abuse.This issue affects Miraculous Elementor: from n/a through <= 2.0.7. | |
| Aplazada | Crítica (9.3) | 0.43% | — | Kamleshyadav WP Lead CaptureAI | 22/1/2026 | 17/6/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages wp-lead-capture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through <= 2.5. | |
| Aplazada | Alta (8.5) | 0.42% | — | Kamleshyadav WP Lead CaptureAI | 22/1/2026 | 17/6/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages wp-lead-capture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through <= 2.5. | |
| Aplazada | Media (5.3) | 0.27% | — | Kamleshyadav MedicalequipmentAI | 30/12/2025 | 17/6/2026 | Missing Authorization vulnerability in kamleshyadav Medicalequipment medicalequipment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Medicalequipment: from n/a through <= 1.0.9. | |
| Aplazada | Alta (7.5) | 0.36% | — | Kamleshyadav MiraculousAI | 6/11/2025 | 17/6/2026 | Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.0.9. | |
| Aplazada | Crítica (9.8) | 0.42% | — | Kamleshyadav Miraculous CoreAI | 6/11/2025 | 17/6/2026 | Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9. | |
| Aplazada | Alta (7.1) | 0.24% | — | Kamleshyadav CF7 Auto Responder AddonAI | 22/10/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav CF7 Auto Responder Addon CF7-autoresponder-addon allows DOM-Based XSS.This issue affects CF7 Auto Responder Addon: from n/a through <= 2.4. | |
| Aplazada | Alta (7.1) | 0.25% | — | Kamleshyadav RockondjAI | 22/10/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav RockON DJ rockon allows Reflected XSS.This issue affects RockON DJ: from n/a through <= 3.3. | |
| Aplazada | Crítica (9.3) | 0.31% | — | Kamleshyadav MiraculousAI | 5/9/2025 | 17/6/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous miraculous allows Blind SQL Injection.This issue affects Miraculous: from n/a through < 2.0.9. | |
| Aplazada | Media (5.4) | 0.17% | — | Kamleshyadav Exit Intent PopupAI | 3/9/2025 | 17/6/2026 | Server-Side Request Forgery (SSRF) vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through <= 1.0.1. | |
| Aplazada | Crítica (9.8) | 6.1% | — | Kamleshyadav Miraculous Core PluginAI | 28/8/2025 | 17/6/2026 | Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through <= 2.0.7. | |
| Aplazada | Alta (7.5) | 0.37% | — | Kamleshyadav WP Lead Capturing PagesAI | 14/8/2025 | 17/6/2026 | Missing Authorization vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Lead Capturing Pages: from n/a through < 2.6. | |
| Aplazada | Media (5.3) | 0.23% | — | Kamleshyadav CF7 7 Mailchimp Add-onAI | 4/7/2025 | 17/6/2026 | Missing Authorization vulnerability in kamleshyadav CF7 7 Mailchimp Add-on CF7-mailchimp-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CF7 7 Mailchimp Add-on: from n/a through < 2.4. | |
| Aplazada | Crítica (9.3) | 0.43% | — | Kamleshyadav WP Lead Capturing PagesAI | 9/6/2025 | 17/6/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through < 2.6. | |
| Aplazada | Crítica (9.3) | 0.43% | — | Kamleshyadav Pixel Wordpress Form Builder Plugin & AutoresponderAI | 23/5/2025 | 17/6/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilder allows Blind SQL Injection.This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through <= 1.0.2. | |
| Aplazada | Media (5.4) | 0.15% | — | Kamleshyadav Pixel Wordpress Form Builder Plugin AND AutoresponderAI | 16/5/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilder allows Cross Site Request Forgery.This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through <= 1.0.3. | |
| Modificada | Alta (7.5) | 0.97% | — | Kaml Project Kaml | 20/3/2023 | 17/6/2026 | kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no… | |
| Modificada | Media (6.5) | 1.7% | — | Kaml Project Kaml | 7/9/2021 | 17/6/2026 | kaml is an open source implementation of the YAML format with support for kotlinx.serialization. In affected versions attackers that could provide arbitrary YAML input to an application that uses kaml could cause the application to endlessly loop while parsing the input. This could result in resource starvation and… |