Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2676▼ 422 respecto a la semana anterior

Críticas / altas1295▼ 73 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-66580	Aplazada	Alta (8.5)	0.36%	—	Product Feed Manager^AI	17/9/2026	17/9/2026	Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.
CVE-2026-15258	Aplazada	Alta (8.1)	0.39%	—	Product Feed Manager FOR Woocommerce^AI	31/7/2026	26/8/2026	The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks.
CVE-2026-59553	Aplazada	Alta (7.1)	0.25%	—	Product Feed Manager^AI	27/7/2026	27/7/2026	Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.
CVE-2026-15306	Aplazada	Media (6.1)	0.38%	—	Webappick Product Feed Manager FOR Woocommerce^AI	16/7/2026	16/7/2026	The Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to, and including, 7.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
CVE-2023-52144	Aplazada	Media (5.5)	0.42%	—	Rextheme Product Feed Manager^AI	15/4/2024	17/6/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RexTheme Product Feed Manager.This issue affects Product Feed Manager: from n/a through 7.3.15.