Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 554 respecto a la semana anterior

Críticas / altas1325▼ 178 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)268▼ 242 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-32625	Aplazada	Alta (7.1)	0.31%	—	Pootlepress Mobile Pages^AI	17/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pootlepress Mobile Pages mobile-pages allows Reflected XSS.This issue affects Mobile Pages: from n/a through <= 1.0.2.
CVE-2025-23758	Aplazada	Alta (7.1)	0.39%	—	Pootlepress Pootle Button^AI	22/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pootlepress Pootle button pootle-button allows Reflected XSS.This issue affects Pootle button: from n/a through <= 1.2.0.
CVE-2024-37948	Aplazada	Media (6.5)	0.25%	—	Pootlepress Caxton^AI	20/7/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PootlePress Caxton – Create Pro page layouts in Gutenberg allows Stored XSS.This issue affects Caxton – Create Pro page layouts in Gutenberg: from n/a through 1.30.1.
CVE-2024-34573	Aplazada	Media (6.5)	0.30%	—	Pootlepress Pootle Pagebuilder^AI	8/5/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pootlepress Pootle Pagebuilder – WordPress Page builder allows Stored XSS.This issue affects Pootle Pagebuilder – WordPress Page builder: from n/a through 5.7.1.
CVE-2022-0728	Modificada	Media (4.8)	0.60%	—	Pootlepress Easy Smooth Scroll Links	11/4/2022	17/6/2026	The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVE-2010-4245	Modificada	Media (6.1)	1.0%	—	Translatehouse Pootle	28/10/2019	16/6/2026	pootle 2.0.5 has XSS via 'match_names' parameter
CVE-2017-15811	Modificada	Media (5.4)	0.97%	—	Pootlepress Pootle Button	23/10/2017	17/6/2026	The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.