Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1414▲ 60 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)381▼ 129 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.3) | 0.42% | — | Themegrill Magazine BlocksAI | 18/9/2026 | 18/9/2026 | The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.6. This is due to the plugin not properly verifying that a user is authorized to perform an action.… | |
| Aplazada | Media (6.4) | 0.35% | — | Themegrill Magazine BlocksAI | 18/9/2026 | 18/9/2026 | The Magazine Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the News Ticker block's clientId attribute in versions up to, and including, 1.8.6. This is due to insufficient input sanitization and output escaping in the NewsTicker::render() method, which concatenates the clientId block… | |
| Aplazada | Media (6.5) | 0.22% | — | Themegrill Magazine BlocksAI | 24/8/2026 | 24/8/2026 | Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions. | |
| Aplazada | Media (6.5) | 0.22% | — | Themegrill Magazine BlocksAI | 26/6/2026 | 26/6/2026 | Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions. | |
| Aplazada | Media (4.3) | 0.23% | — | Themegrill Magazine BlocksAI | 15/4/2026 | 17/6/2026 | Missing Authorization vulnerability in BlockArt Magazine Blocks magazine-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Magazine Blocks: from n/a through <= 1.8.3. | |
| Aplazada | Media (6.5) | 0.26% | — | Themegrill Magazine BlocksAI | 2/1/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlockArt Magazine Blocks magazine-blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through <= 1.3.20. | |
| Aplazada | Media (6.5) | 0.27% | — | Themegrill Magazine BlocksAI | 28/10/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlockArt Magazine Blocks magazine-blocks allows DOM-Based XSS.This issue affects Magazine Blocks: from n/a through <= 1.3.15. | |
| Analizada | Media (6.1) | 0.39% | — | Themegrill Magazine Blocks | 2/10/2024 | 17/6/2026 | The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.14. This makes it… | |
| Aplazada | Media (6.5) | 0.26% | — | Wpblockart Magazine BlocksAI | 16/5/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPBlockart Magazine Blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through 1.3.6. |