Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior
Críticas / altas1356▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.7) | 0.33% | — | Automattic Newspack NewslettersAI | 6/6/2025 | 17/6/2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Phishing.This issue affects Newspack Newsletters: from n/a through <= 3.13.0. | |
| Aplazada | Media (4.3) | 0.20% | — | Automattic Newspack NewslettersAI | 2/1/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Cross Site Request Forgery.This issue affects Newspack Newsletters: from n/a through <= 2.13.2. | |
| Analizada | Alta (8.8) | 0.46% | — | Automattic Newspack | 1/11/2024 | 17/6/2026 | Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6. | |
| Aplazada | Media (6.5) | 0.40% | — | Automattic Newspack Content ConverterAI | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack Content Converter: from n/a through 0.1.5. | |
| Aplazada | Media (5.3) | 0.45% | — | Automattic Newspack NewslettersAI | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2. | |
| Aplazada | Media (5.4) | 0.43% | — | Automattic Newspack BlocksAI | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in Automattic Newspack Blocks newspack-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack Blocks: from n/a through 3.0.8. | |
| Aplazada | Alta (8.5) | 0.47% | — | Automattic Newspack BlocksAI | 1/11/2024 | 17/6/2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack Blocks allows Path Traversal.This issue affects Newspack Blocks: from n/a through 3.0.8. | |
| Aplazada | Alta (7.5) | 0.55% | — | Automattic Newspack BlocksAI | 10/7/2024 | 17/6/2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue affects Newspack Blocks: from n/a through 3.0.8. | |
| Aplazada | Crítica (9.9) | 0.57% | — | Automattic Newspack BlocksAI | 9/7/2024 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to a Web Server.This issue affects Newspack Blocks: from n/a through 3.0.8. | |
| Modificada | Media (5.4) | 0.29% | — | Automattic Newspack ADS | 4/7/2024 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability in Automattic Newspack Ads allows Stored XSS.This issue affects Newspack Ads: from n/a through 1.47.1. | |
| Modificada | Media (5.4) | 0.29% | — | Automattic Newspack Popups | 4/7/2024 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1. |