Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior
Críticas / altas1384▲ 157 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.2) | 0.37% | — | Responsive Slider GalleryAI | 30/9/2026 | 30/9/2026 | Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions. | |
| Aplazada | Crítica (9.1) | 0.82% | — | Metaslider Responsive SliderAI | 15/6/2026 | 17/6/2026 | Editor Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 versions. | |
| Aplazada | Media (5.3) | 0.24% | — | Essentialplugin WP Logo Showcase Responsive Slider AND CarouselAI | 11/6/2026 | 23/7/2026 | Authorization bypass through User-Controlled key vulnerability in Essential Plugin WP Logo Showcase Responsive Slider and Carousel allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Logo Showcase Responsive Slider and Carousel: from n/a through 3.6. | |
| Aplazada | Alta (7.2) | 0.54% | — | Metaslider Responsive SliderAI | 21/4/2026 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider allows Object Injection.This issue affects Responsive Slider by MetaSlider: from n/a through 3.106.0. | |
| Aplazada | Alta (7.1) | 0.28% | — | Lambertgroup Magic Responsive Slider AND CarouselAI | 22/1/2026 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic_carousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through <= 1.6. | |
| Aplazada | Media (6.1) | 0.21% | — | Multi Item Responsive SliderAI | 24/10/2025 | 17/6/2026 | The Multi Item Responsive Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'mioptions.php' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web… | |
| Aplazada | Media (6.4) | 0.25% | — | Marcelotorres Simple Responsive SliderAI | 12/8/2025 | 17/6/2026 | The Simple Responsive Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web… | |
| Aplazada | Alta (7.1) | 0.24% | — | Extendyourweb Super Responsive SliderAI | 28/3/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through <= 1.4. | |
| Aplazada | Crítica (9.8) | 0.65% | — | Metaslider Responsive SliderAI | 22/2/2025 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Object Injection.This issue affects Responsive Slider by MetaSlider: from n/a through <= 3.94.0. | |
| Aplazada | Media (5.4) | 0.14% | — | Metaslider Responsive SliderAI | 27/1/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Cross Site Request Forgery.This issue affects Responsive Slider by MetaSlider: from n/a through <= 3.92.0. | |
| Modificada | Media (6.1) | 0.29% | — | Marcelotorres Simple Responsive Slider | 20/7/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5. | |
| Aplazada | Alta (7.1) | 0.38% | — | Creative-solutions Creative Image Slider - Responsive Slider PluginAI | 29/3/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3. |