Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2568▼ 310 respecto a la semana anterior
Críticas / altas1351▲ 96 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.9) | 0.24% | — | Getlasso Simple UrlsAI | 2/7/2026 | 2/7/2026 | Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. | |
| Aplazada | Media (5.4) | 0.54% | — | Getlasso Simple UrlsAI | 13/12/2024 | 17/6/2026 | Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through <= 117. | |
| Modificada | Media (5.4) | 0.45% | — | Getlasso Simple Urls | 30/11/2023 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management: from n/a through… | |
| Modificada | Alta (8.8) | 0.21% | — | Getlasso Simple Urls | 16/10/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <= 120 versions. | |
| Modificada | Media (6.1) | 0.40% | — | Getlasso Simple Urls | 27/9/2023 | 17/6/2026 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lasso Simple URLs plugin <= 117 versions. | |
| Modificada | Media (6.1) | 1.7% | — | Getlasso Simple Urls | 13/2/2023 | 17/6/2026 | The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | |
| Modificada | Alta (8.8) | 0.94% | — | Getlasso Simple Urls | 13/2/2023 | 17/6/2026 | The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber. |