Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior

Críticas / altas1285▼ 65 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-32569	Aplazada	Alta (7.1)	0.24%	—	Joomunited WP Media Folder^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
CVE-2026-16638	Pendiente de análisis	Media (6.1)	0.15%	—	Drupal Media Folders^AI	25/8/2026	28/8/2026	Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8.
CVE-2026-11974	Aplazada	Alta (8.6)	0.73%	—	WP Media Folder Addon^AI	29/7/2026	10/8/2026	The wp-media-folder-addon WordPress plugin before 4.1.7 does not validate a user-supplied parameter before using it in a file read operation in two AJAX actions available to unauthenticated users, leading to Arbitrary File Disclosure and Server-Side Request Forgery on sites where a cloud storage connection has been…
CVE-2026-9690	Aplazada	Alta (7.5)	0.50%	—	Joomunited WP Media Folder^AI	17/6/2026	17/6/2026	Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions.
CVE-2025-52786	Aplazada	Alta (7.1)	0.20%	—	Kingdom Creation Media Folder^AI	16/7/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kingdom Creation Media Folder media-folder allows Reflected XSS.This issue affects Media Folder: from n/a through <= 1.0.0.
CVE-2024-25908	Aplazada	Media (4.3)	0.34%	—	Joomunited WP Media Folder^AI	11/4/2024	17/6/2026	Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.
CVE-2024-25907	Aplazada	Media (5.4)	0.36%	—	Joomunited WP Media Folder^AI	11/4/2024	17/6/2026	Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.
CVE-2024-25909	Modificada	Alta (8.8)	0.64%	—	Joomunited WP Media Folder	26/2/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.