Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2682▼ 88 respecto a la semana anterior
Críticas / altas1443▲ 300 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.3) | 0.18% | — | Search Simple FieldsAI | 27/5/2026 | 17/6/2026 | The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the search_simple_fields_options() function in functions_admin.php. This makes it possible for unauthenticated attackers to modify the… | |
| Aplazada | Media (6.9) | 0.53% | — | Simple FieldsAI | 17/5/2026 | 17/6/2026 | Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting null bytes into the wp_abspath parameter on PHP versions before 5.3.4. Attackers can supply malicious wp_abspath values to simple_fields.php to… | |
| Modificada | Alta (8.8) | 0.67% | — | Simple Fields Project Simple Fields | 14/8/2019 | 17/6/2026 | The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. | |
| Modificada | Media (6.1) | 0.95% | — | Simple Fields Project Simple Fields | 13/8/2019 | 17/6/2026 | The simple-fields plugin before 1.4.11 for WordPress has XSS. |