Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-22379	Aplazada	Alta (8.1)	0.47%	—	Ancorathemes Netmix^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Netmix netmix allows PHP Local File Inclusion.This issue affects Netmix: from n/a through <= 1.0.10.
CVE-2025-53568	Aplazada	Media (4.3)	0.14%	—	Netmix Radio Station^AI	4/7/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Tony Zeoli Radio Station radio-station allows Cross Site Request Forgery.This issue affects Radio Station: from n/a through <= 2.5.12.
CVE-2024-33689	Aplazada	Media (4.3)	0.20%	—	Netmix Radio Station^AI	26/4/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Tony Zeoli Radio Station radio-station.This issue affects Radio Station: from n/a through <= 2.5.7.
CVE-2023-32499	Modificada	Media (6.1)	0.38%	—	Netmix Radio Station	23/8/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tony Zeoli, Tony Hayes Radio Station by netmix® – Manage and play your Show Schedule in WordPress! plugin <= 2.4.0.9 versions.
CVE-2020-10257	Modificada	Crítica (9.8)	8.9%	—	Themerex Addons Themerex Ozeum-museum Themerex Chit Club-board Games Themerex Yottis-simple Portfolio+59	10/3/2020	17/6/2026	The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.