Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2700▼ 69 respecto a la semana anterior
Críticas / altas1449▲ 307 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.5) | 0.23% | — | Marketing Fire LLC Loginwp - PROAI | 5/1/2026 | 30/9/2026 | Missing Authorization vulnerability in Marketing Fire LLC LoginWP - Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LoginWP - Pro: from n/a through 4.0.8.5. | |
| Aplazada | Media (6.5) | 0.23% | — | Marketing Fire LLC Loginwp - PROAI | 5/1/2026 | 30/9/2026 | Missing Authorization vulnerability in Marketing Fire, LLC LoginWP - Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LoginWP - Pro: from n/a through 4.0.8.5. | |
| Modificada | Media (6.1) | 0.83% | — | Profilepress Loginwp | 6/12/2021 | 17/6/2026 | The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue | |
| Modificada | Media (6.1) | 0.92% | — | Profilepress Loginwp | 22/8/2019 | 17/6/2026 | The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs. | |
| Modificada | Alta (8.8) | 0.67% | — | Profilepress Loginwp | 16/8/2019 | 17/6/2026 | The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF. |