Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2769▲ 8 respecto a la semana anterior

Críticas / altas1461▲ 292 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)93▼ 416 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-60183	Aplazada	Media (5.9)	0.24%	—	Silencesoft External RSS Reader^AI AJ Square INC RSS Reader^AI	20/2/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Stored XSS.This issue affects Silencesoft RSS Reader: from n/a through <= 0.6.
CVE-2025-60181	Aplazada	Media (5.4)	0.17%	—	AJ Square INC RSS Reader^AI	26/9/2025	17/6/2026	Server-Side Request Forgery (SSRF) vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader: from n/a through <= 0.6.
CVE-2025-7842	Aplazada	Media (4.3)	0.13%	—	AJ Square INC RSS Reader^AI	23/8/2025	17/6/2026	The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'sil_rss_edit_page' page. This makes it possible for unauthenticated attackers to delete RSS feeds via a forged request…
CVE-2021-20752	Modificada	Media (6.1)	0.79%	—	Ikalka RSS Reader Project Ikalka RSS Reader	1/7/2021	17/6/2026	Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2008-4753	Modificada	Alta (7.5)	1.0%	—	AJ Square INC RSS Reader	27/10/2008	16/6/2026	SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter.
CVE-2007-5410	Modificada	Media (6.8)	5.4%	—	Joomla Webmaster-tips Flash RSS Reader	12/10/2007	16/6/2026	PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader (com_wmtrssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
CVE-2007-2060	Modificada	Media (6.8)	3.2%	—	Wizz Computers Wizz RSS Reader	18/4/2007	16/6/2026	Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.