Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2976▼ 107 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-57331	Aplazada	Crítica (9.9)	0.55%	—	Paid Videochat Turnkey Site Performer^AI	29/6/2026	29/6/2026	Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions.
CVE-2026-27333	Aplazada	Alta (8.1)	0.44%	—	Paid Videochat Turnkey Site^AI	15/6/2026	17/6/2026	Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site <= 7.3.23 versions.
CVE-2026-24590	Aplazada	Media (5.3)	0.25%	—	Videowhisper Paid Videochat Turnkey Site^AI	26/5/2026	24/7/2026	Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey Site: from n/a through 7.3.23.
CVE-2025-8899	Aplazada	Alta (8.8)	0.38%	—	Videowhisper Paid Videochat Turnkey Site^AI	7/3/2026	17/6/2026	The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20. This is due to videowhisper_register_form() function not restricting user roles that can be set during registration. This makes it possible for authenticated…
CVE-2025-62959	Aplazada	Crítica (9.1)	0.46%	—	Videowhisper Paid Videochat Turnkey Site^AI	27/10/2025	17/6/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Remote Code Inclusion.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.23.
CVE-2025-31380	Aplazada	Crítica (9.8)	0.56%	—	Videowhisper Paid Videochat Turnkey Site^AI	17/4/2025	17/6/2026	Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Password Recovery Exploitation.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.11.
CVE-2025-22663	Aplazada	Alta (8.6)	0.55%	—	Videowhisper Paid Videochat Turnkey Site^AI	18/2/2025	17/6/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Path Traversal.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.2.12.