Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.3) | 0.52% | — | Kamalkhan KK Star RatingsAI | 22/8/2026 | 26/8/2026 | The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10.3. This is due to the software allowing users to execute an action that does not properly validate the 'payload' value before running… | |
| Aplazada | Media (5.3) | 0.35% | — | Kamalkhan KK Star RatingsAI | 2/1/2025 | 17/6/2026 | Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.5. | |
| Aplazada | Alta (7.3) | 0.63% | — | Kamalkhan KK Star RatingsAI | 21/12/2024 | 17/6/2026 | The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes… | |
| Aplazada | Media (5.3) | 0.56% | — | Kamalkhan KK Star RatingsAI | 13/12/2024 | 17/6/2026 | Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.3. | |
| Modificada | Media (5.9) | 0.41% | — | Kamalkhan KK Star Ratings | 27/11/2023 | 17/6/2026 | The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. | |
| Modificada | Media (6.1) | 0.69% | — | Kamalkhan KK Star Ratings | 11/5/2021 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin before 4.1.5. |