Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior

Críticas / altas1270▼ 74 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-2410	Modificada	Media (4.8)	0.61%	—	Mtouch Quiz Project Mtouch Quiz	8/8/2022	17/6/2026	The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2015-9389	Modificada	Media (5.4)	0.78%	—	Mtouch Quiz Project Mtouch Quiz	20/9/2019	17/6/2026	The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
CVE-2015-9388	Modificada	Media (6.5)	0.67%	—	Mtouch Quiz Project Mtouch Quiz	20/9/2019	17/6/2026	The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
CVE-2015-9387	Modificada	Media (6.5)	0.67%	—	Mtouch Quiz Project Mtouch Quiz	20/9/2019	17/6/2026	The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
CVE-2015-9386	Modificada	Media (6.1)	1.0%	—	Mtouch Quiz Project Mtouch Quiz	20/9/2019	17/6/2026	The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
CVE-2014-100023	Modificada	Media (4.3)	2.0%	—	Mtouch Quiz Project Mtouch Quiz	13/1/2015	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter to wp-admin/edit.php.
CVE-2014-100022	Modificada	Alta (7.5)	2.3%	—	Mtouch Quiz Project Mtouch Quiz	13/1/2015	17/6/2026	SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php.