Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2494▼ 451 respecto a la semana anterior
Críticas / altas1280▼ 7 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 463 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (10) | 0.60% | — | SiteskiteAI | 30/9/2026 | 30/9/2026 | Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions. | |
| Aplazada | Media (4.3) | 0.18% | — | SiteskiteAI | 23/9/2026 | 23/9/2026 | Contributor Insecure Direct Object References (IDOR) in SiteSkite <= 2.1.7 versions. | |
| Aplazada | Media (4.3) | 0.10% | — | Google Site KITAI | 11/9/2026 | 11/9/2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions. | |
| Aplazada | Alta (8.1) | 0.37% | — | SiteskiteAI | 10/9/2026 | 10/9/2026 | Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions. | |
| Aplazada | Baja (2.7) | 0.28% | — | Google Site KITAI | 24/6/2026 | 25/6/2026 | The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should… | |
| Modificada | Media (4.3) | 0.25% | — | Google Site KIT | 7/7/2023 | 17/6/2026 | The Site Kit by Google plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 1.8.0 This is due to the lack of capability checks on the admin_enqueue_scripts action which displays the connection key. This makes it possible for authenticated attackers with any level of… |