Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
18 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.3) | 0.29% | — | Rapidload Power-up FOR Autoptimize | 1/2/2025 | 17/6/2026 | The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_deactivate() function in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and… | |
| Aplazada | Alta (7.2) | 0.37% | — | Rapidload Power-up FOR AutoptimizeAI | 7/4/2024 | 17/6/2026 | Server-Side Request Forgery (SSRF) vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize.This issue affects RapidLoad Power-Up for Autoptimize: from n/a through 2.2.11. | |
| Modificada | Media (6.5) | 0.64% | — | Rapidload Power-up FOR Autoptimize | 22/6/2023 | 17/6/2026 | Auth. (subscriber+) SQL Injection (SQLi) vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin <= 1.6.35 versions. | |
| Modificada | Media (6.3) | 0.21% | — | Rapidload Power-up FOR Autoptimize | 17/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to invoke those functions, via forged request… | |
| Modificada | Media (4.3) | 0.32% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_page_cache function. This makes it possible for unauthenticated attackers to clear the plugin's cache via a… | |
| Modificada | Media (4.3) | 0.31% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the queue_posts function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a… | |
| Modificada | Media (4.3) | 0.31% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the uucss_update_rule function. This makes it possible for unauthenticated attackers to modify the plugin's cache via… | |
| Modificada | Media (4.3) | 0.31% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the attach_rule function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a… | |
| Modificada | Media (4.3) | 0.31% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ucss_connect function. This makes it possible for unauthenticated attackers to connect the site to a new license… | |
| Modificada | Media (4.3) | 0.31% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ajax_deactivate function. This makes it possible for unauthenticated attackers to turn off caching via a forged… | |
| Modificada | Media (4.3) | 0.31% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_uucss_logs function. This makes it possible for unauthenticated attackers to clear plugin logs via a forged… | |
| Modificada | Media (4.3) | 0.55% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the uucss_update_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to update caching rules. | |
| Modificada | Media (4.3) | 0.55% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the attach_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify cache rules. | |
| Modificada | Media (4.3) | 1.0% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the clear_uucss_logs function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete plugin log files. | |
| Modificada | Media (4.3) | 0.55% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the ajax_deactivate function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to disable caching. | |
| Modificada | Media (4.3) | 0.55% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the ucss_connect function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to connect a new… | |
| Modificada | Media (4.3) | 0.55% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the queue_posts function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify the plugin's… | |
| Modificada | Media (4.3) | 0.55% | — | Rapidload Power-up FOR Autoptimize | 10/3/2023 | 17/6/2026 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the clear_page_cache function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete the plugin's cache. |