Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior

Críticas / altas1376▼ 50 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-32516	Aplazada	Alta (8.5)	0.36%	—	Kamleshyadav Miraculous Core^AI	25/3/2026	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through < 2.1.2.
CVE-2026-32515	Aplazada	Alta (7.5)	0.41%	—	Kamleshyadav Miraculous^AI	25/3/2026	17/6/2026	Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.1.2.
CVE-2025-67998	Aplazada	Alta (8.8)	0.37%	—	Kamleshyadav Miraculous Elementor^AI	20/2/2026	17/6/2026	Authentication Bypass Using an Alternate Path or Channel vulnerability in kamleshyadav Miraculous Elementor miraculous-el allows Authentication Abuse.This issue affects Miraculous Elementor: from n/a through <= 2.0.7.
CVE-2025-58629	Aplazada	Alta (7.5)	0.36%	—	Kamleshyadav Miraculous^AI	6/11/2025	17/6/2026	Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.0.9.
CVE-2025-58627	Aplazada	Crítica (9.8)	0.42%	—	Kamleshyadav Miraculous Core^AI	6/11/2025	17/6/2026	Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.
CVE-2025-58628	Aplazada	Crítica (9.3)	0.31%	—	Kamleshyadav Miraculous^AI	5/9/2025	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous miraculous allows Blind SQL Injection.This issue affects Miraculous: from n/a through < 2.0.9.
CVE-2025-49388	Aplazada	Crítica (9.8)	6.5%	💥 PoC	Kamleshyadav Miraculous Core Plugin^AI	28/8/2025	17/6/2026	Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through <= 2.0.7.