Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2532▼ 361 respecto a la semana anterior
Críticas / altas1338▲ 69 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.25% | — | PerfmattersAI | 2/7/2026 | 2/7/2026 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions. | |
| Aplazada | Alta (7.5) | 0.94% | — | PerfmattersAI | 2/7/2026 | 2/7/2026 | The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires the… | |
| Aplazada | Alta (7.1) | 0.25% | — | PerfmattersAI | 26/6/2026 | 26/6/2026 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. | |
| Aplazada | Alta (8.1) | 0.53% | — | PerfmattersAI | 10/4/2026 | 17/6/2026 | The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and including, 2.5.9. This is due to the `PMCS::action_handler()` method processing the bulk action `activate`/`deactivate` handlers without any authorization check or nonce verification. The… | |
| Aplazada | Alta (8.1) | 0.53% | — | PerfmattersAI | 3/4/2026 | 21/7/2026 | The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method processing the `$_GET['delete']` parameter without any sanitization, authorization check, or nonce verification. The… | |
| Modificada | Alta (8.8) | 0.41% | — | Perfmatters | 29/2/2024 | 17/6/2026 | Missing Authorization vulnerability in Perfmatters.This issue affects Perfmatters: from n/a through 2.1.6. | |
| Modificada | Media (5.4) | 0.37% | — | Perfmatters | 30/11/2023 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Stored XSS.This issue affects Perfmatters: from n/a before 2.2.0. | |
| Modificada | Media (6.1) | 0.41% | — | Perfmatters | 30/11/2023 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Reflected XSS.This issue affects Perfmatters: from n/a through 2.1.6. | |
| Modificada | Alta (8.8) | 0.24% | — | Perfmatters | 30/11/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Perfmatters allows Cross Site Request Forgery.This issue affects Perfmatters: from n/a through 2.1.6. |