Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2778▼ 418 respecto a la semana anterior

Críticas / altas1332▼ 108 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-24595	Aplazada	Media (5.4)	0.30%	—	Zoho CRM Lead Magnet^AI	23/1/2026	17/6/2026	Missing Authorization vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho CRM Lead Magnet: from n/a through <= 1.8.1.9.
CVE-2025-47596	Aplazada	Media (4.3)	0.17%	—	Syedbalkhi Beacon Lead Magnets AND Lead Capture^AI	7/5/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Beacon Lead Magnets and Lead Capture beacon-by allows Cross Site Request Forgery.This issue affects Beacon Lead Magnets and Lead Capture: from n/a through <= 1.5.8.
CVE-2025-24637	Aplazada	Alta (7.1)	0.29%	—	Syedbalkhi Beacon Lead Magnets AND Lead Capture^AI	17/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi Beacon Lead Magnets and Lead Capture beacon-by allows Reflected XSS.This issue affects Beacon Lead Magnets and Lead Capture: from n/a through <= 1.5.7.
CVE-2024-49297	Aplazada	Alta (8.5)	0.40%	—	Zohocorp Zoho CRM Lead Magnet^AI	17/10/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows SQL Injection.This issue affects Zoho CRM Lead Magnet: from n/a through <= 1.7.9.7.
CVE-2024-38696	Aplazada	Alta (7.1)	0.32%	—	Zoho CRM Lead Magnet^AI	20/7/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zoho CRM Zoho CRM Lead Magnet allows Reflected XSS.This issue affects Zoho CRM Lead Magnet: from n/a through 1.7.8.8.
CVE-2022-41978	Modificada	Media (6.5)	3.3%	—	Zohocorp Zoho CRM Lead Magnet	9/11/2022	17/6/2026	Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress.
CVE-2021-33849	Modificada	Media (5.4)	1.1%	—	Zohocorp Zoho CRM Lead Magnet	5/10/2021	17/6/2026	A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser is connected to a trusted website. The attack targets your application's users and not the application itself while using your application as the attack's vehicle. The XSS payload executes whenever…
CVE-2019-19306	Modificada	Media (5.4)	1.1%	—	Zoho Lead Magnet	26/11/2019	17/6/2026	The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.