Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2817▼ 183 respecto a la semana anterior
Críticas / altas1372▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.3) | 0.18% | — | KIT FOR WoocommerceAI | 5/10/2026 | 6/10/2026 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0. | |
| Aplazada | Media (5.3) | 0.33% | — | KIT FOR WoocommerceAI | 2/7/2026 | 2/7/2026 | Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions. | |
| Modificada | Media (4.3) | 0.33% | — | Yithemes Yith Essential KIT FOR Woocommerce | 19/7/2024 | 17/6/2026 | The YITH Essential Kit for WooCommerce #1 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_module', 'deactivate_module', and 'install_module' functions in all versions up to, and including, 2.34.0. This makes it possible for authenticated… | |
| Modificada | Media (6.1) | 0.88% | — | Visser Store Toolkit FOR Woocommerce | 7/2/2022 | 17/6/2026 | The Store Toolkit for WooCommerce WordPress plugin before 2.3.2 does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting | |
| Modificada | Crítica (9.8) | 2.1% | — | Visser Store Toolkit FOR Woocommerce | 22/8/2019 | 17/6/2026 | The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation. | |
| Modificada | Crítica (9.8) | 2.1% | — | Visser Store Toolkit FOR Woocommerce | 22/8/2019 | 17/6/2026 | The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation. |