Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior

Críticas / altas1367▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-95604	Aplazada	Alta (7.5)	0.33%	—	Loops AND Logic^AI	23/9/2026	23/9/2026	Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions.
CVE-2026-16960	Aplazada	Alta (7.5)	0.35%	—	Loops AND Logic^AI	9/9/2026	9/9/2026	The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records (including email addresses and roles) and arbitrary site options.
CVE-2026-82123	Aplazada	Media (6.5)	0.29%	—	Tangible Loops AND Logic^AI	28/8/2026	8/9/2026	Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic.
CVE-2026-57391	Aplazada	Media (6.5)	0.24%	—	Tangible Loops AND Logic^AI	13/7/2026	13/7/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue affects Loops & Logic: from n/a through <= 4.2.3.
CVE-2024-47333	Aplazada	Alta (7.1)	0.30%	—	Tangible Loops AND Logic^AI	6/10/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Reflected XSS.This issue affects Loops & Logic: from n/a through <= 4.1.4.