Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2950▲ 8 respecto a la semana anterior

Críticas / altas1450▲ 184 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior

13 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-66677	Aplazada	Alta (7.6)	0.39%	—	Leyka^AI	20/8/2026	20/8/2026	Subscriber Broken Authentication in Leyka <= 3.32.3 versions.
CVE-2025-52805	Aplazada	Alta (7.5)	0.52%	—	Vaultdweller Leyka^AI	4/7/2025	17/6/2026	Path Traversal: '.../...//' vulnerability in VaultDweller Leyka leyka allows PHP Local File Inclusion.This issue affects Leyka: from n/a through <= 3.32.1.
CVE-2025-53275	Aplazada	Media (6.5)	0.23%	—	Vaultdweller Leyka^AI	27/6/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows DOM-Based XSS.This issue affects Leyka: from n/a through <= 3.32.1.
CVE-2025-26766	Aplazada	Media (6.5)	0.24%	—	Vaultdweller Leyka^AI	16/2/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through <= 3.31.8.
CVE-2024-49252	Aplazada	Media (5.3)	0.36%	—	Vaultdweller Leyka^AI	16/10/2024	17/6/2026	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through <= 3.31.6.
CVE-2024-35683	Aplazada	Media (5.3)	0.38%	—	Teplitsa OF Social Technologies Leyka^AI	11/6/2024	17/6/2026	Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1.
CVE-2023-33327	Aplazada	Alta (8.8)	0.52%	—	Teplitsa OF Social Technologies Leyka^AI	14/5/2024	17/6/2026	Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2.
CVE-2023-27442	Modificada	Alta (8.8)	0.29%	—	Techsoupeurope Leyka	22/11/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.29.2 versions.
CVE-2023-2995	Modificada	Media (4.8)	0.45%	—	Te-st Leyka	19/9/2023	17/6/2026	The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2023-4917	Modificada	Media (6.5)	0.75%	—	Te-st Leyka	13/9/2023	17/6/2026	The Leyka plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.30.7 via the 'leyka_ajax_get_env_and_options' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including Sberbank API key and password,…
CVE-2023-33325	Modificada	Media (6.1)	0.38%	—	Te-st Leyka	30/8/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.30.1 versions.
CVE-2023-39314	Modificada	Media (6.1)	0.39%	—	Te-st Leyka	10/8/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.30.2 versions.
CVE-2023-27450	Modificada	Media (6.1)	0.38%	—	Te-st Leyka	21/6/2023	17/6/2026	Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.29.2 versions.