Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior

Críticas / altas1367▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-82228	Aplazada	Alta (8.1)	0.40%	—	Siteground Security^AI	31/8/2026	1/9/2026	Unauthenticated Bypass Vulnerability in SiteGround Security <= 1.6.6 versions.
CVE-2025-66121	Aplazada	Media (5.3)	0.32%	—	Siteground Security^AI	16/12/2025	17/6/2026	Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through <= 1.5.8.
CVE-2024-38774	Aplazada	Media (5.4)	0.41%	—	Siteground Security^AI	1/11/2024	17/6/2026	Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through 1.5.0.
CVE-2023-0234	Modificada	Alta (8.8)	18%	—	Siteground Security	6/2/2023	17/6/2026	The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.
CVE-2022-0993	Modificada	Crítica (9.8)	7.5%	—	Siteground Security	19/4/2022	17/6/2026	The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and including, 1.2.5.