Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2838▼ 146 respecto a la semana anterior
Críticas / altas1377▲ 68 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 268 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.9) | 0.79% | — | Daggerheart Query WranglerAI | 20/8/2026 | 20/8/2026 | Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions. | |
| Aplazada | Alta (8.8) | 1.0% | — | Daggerheart Query WranglerAI | 16/8/2026 | 20/8/2026 | The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to missing capability check and nonce verification on the wp_ajax_qw_form_ajax handler, combined with unsanitized attacker-controlled options… | |
| Aplazada | Media (4.3) | 0.27% | — | Daggerheart Query WranglerAI | 23/7/2026 | 23/7/2026 | Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions. | |
| Aplazada | Media (5.4) | 0.20% | — | Daggerheart Query WranglerAI | 1/4/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Daggerhart Query Wrangler query-wrangler allows Cross Site Request Forgery.This issue affects Query Wrangler: from n/a through <= 1.5.54. | |
| Modificada | Media (6.1) | 0.38% | — | Daggerheart Query Wrangler | 16/8/2023 | 17/6/2026 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jonathan Daggerhart Query Wrangler plugin <= 1.5.51 versions. |