Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2610▼ 308 respecto a la semana anterior

Críticas / altas1345▲ 79 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 465 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-32538	Aplazada	Alta (7.5)	0.42%	—	Noor Alam Smtp Mailer^AI	25/3/2026	17/6/2026	Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Embedded Sensitive Data.This issue affects SMTP Mailer: from n/a through <= 1.1.24.
CVE-2025-62762	Aplazada	Media (4.3)	0.13%	—	Photoboxone Smtp Mail^AI	9/12/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through <= 1.3.51.
CVE-2025-23453	Aplazada	Alta (7.1)	0.41%	—	Myriadsolutionz Stars Smtp Mailer^AI	16/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: from n/a through <= 1.7.
CVE-2024-56003	Aplazada	Media (4.3)	0.36%	—	Davidcramer Caldera Smtp Mailer^AI	16/12/2024	17/6/2026	Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through <= 1.0.1.
CVE-2024-50530	En análisis	Alta (8.8)	0.49%	—	Myriadsolutionz Stars Smtp Mailer	4/11/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Upload a Web Shell to a Web Server.This issue affects Stars SMTP Mailer: from n/a through <= 2.2.1.
CVE-2024-25914	Modificada	Alta (8.8)	0.21%	—	Photoboxone Smtp Mail	13/2/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through 1.3.20.
CVE-2023-3092	Modificada	Media (6.1)	0.49%	—	Photoboxone Smtp Mail	12/7/2023	17/6/2026	The SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.3.46 due to insufficient input sanitization and output escaping when the 'Save Data SendMail' feature is enabled. This makes it possible for unauthenticated attackers to inject…
CVE-2023-1090	Modificada	Media (4.8)	0.53%	—	Smtp Mailing Queue Project Smtp Mailing Queue	2/5/2023	17/6/2026	The SMTP Mailing Queue WordPress plugin before 2.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2022-1612	Modificada	Media (6.5)	0.53%	—	Webriti Smtp Mail	13/6/2022	17/6/2026	The Webriti SMTP Mail WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVE-1999-1200	Modificada	Media (5)	1.3%	—	Vintra Systems Smtp Mailserver	20/7/1998	16/6/2026	Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.