Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-19709	Aplazada	Media (5.3)	0.32%	—	Wpswings Membership FOR Woocommerce^AI	19/8/2026	26/8/2026	The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the…
CVE-2026-57709	Aplazada	Alta (8.6)	0.53%	—	Wpswings Membership FOR Woocommerce^AI	13/7/2026	13/7/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Path Traversal.This issue affects Membership For WooCommerce: from n/a through <= 3.1.0.
CVE-2025-67909	Aplazada	Alta (7.5)	0.39%	—	Wpswings Membership FOR Woocommerce^AI	24/12/2025	17/6/2026	Authorization Bypass Through User-Controlled Key vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Membership For WooCommerce: from n/a through <= 3.0.3.
CVE-2025-54692	Aplazada	Alta (7.5)	0.36%	—	Wpswings Membership FOR Woocommerce^AI	14/8/2025	17/6/2026	Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Membership For WooCommerce: from n/a through <= 2.9.0.
CVE-2025-49265	Aplazada	Alta (7.5)	0.34%	—	Wpswings Membership FOR Woocommerce^AI	9/6/2025	17/6/2026	Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Membership For WooCommerce: from n/a through <= 2.8.1.
CVE-2025-39579	Aplazada	Media (6.5)	0.32%	—	Wpswings Membership FOR Woocommerce^AI	16/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows DOM-Based XSS.This issue affects Membership For WooCommerce: from n/a through <= 2.8.0.
CVE-2022-4395	Modificada	Crítica (9.8)	18%	💥 Exploit	Wpswings Membership FOR Woocommerce	30/1/2023	17/6/2026	The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.