Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2540▼ 352 respecto a la semana anterior
Críticas / altas1339▲ 68 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaMedia (6.5)0.37%—Nomaniplex Easy Social SharebarAI19/11/202417/6/2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nomaniplex Easy Social Sharebar easy-social-sharebar allows Stored XSS.This issue affects Easy Social Sharebar: from n/a through <= 1.0.0.
ModificadaMedia (5.4)0.30%—Sharebar Project Sharebar11/7/202217/6/2026
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of them
ModificadaCrítica (9.8)1.8%—Sharebar Project Sharebar28/8/201916/6/2026
The sharebar plugin before 1.2.2 for WordPress has SQL injection.
ModificadaMedia (6.1)0.93%—Sharebar Project Sharebar28/8/201916/6/2026
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.
ModificadaMedia (6.8)1.1%—Mdolon Sharebar16/7/201316/6/2026
Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) modify buttons, or (3) insert cross-site scripting (XSS) sequences.