Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2538▼ 400 respecto a la semana anterior
Críticas / altas1320▲ 39 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.18% | — | Andreamarinucci Notification FOR TelegramAI | 30/9/2026 | 30/9/2026 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. | |
| Aplazada | Media (4.3) | 0.47% | — | Andreamarinucci Notification FOR TelegramAI | 11/7/2026 | 13/7/2026 | The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and… | |
| Aplazada | Alta (7.1) | 0.25% | — | Andreamarinucci Notification FOR TelegramAI | 15/6/2026 | 17/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions. | |
| Aplazada | Media (4.3) | 0.22% | — | Andreamarinucci Notification FOR TelegramAI | 9/12/2025 | 17/6/2026 | Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram: from n/a through <= 3.5.1. | |
| Aplazada | Media (4.3) | 0.14% | — | Andreamarinucci Notification FOR TelegramAI | 5/9/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue affects Notification for Telegram: from n/a through <= 3.5. | |
| Analizada | Media (5.3) | 0.33% | — | Choplugins Order Notification FOR Telegram | 25/10/2024 | 17/6/2026 | The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nktgnfw_send_test_message' function in versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to send a test message via the Telegram… | |
| Analizada | Media (4.3) | 0.32% | — | Andreamarinucci Notification FOR Telegram | 10/10/2024 | 17/6/2026 | The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftb_test_action' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to send a test… |