Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2847▼ 151 respecto a la semana anterior
Críticas / altas1373▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 257 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.1) | 0.32% | — | Wpmudev Smush Image Compression AND OptimizationAI | 6/11/2025 | 17/6/2026 | Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0. | |
| Modificada | Media (6.1) | 0.79% | — | Wpmudev Smush Image Compression AND Optimization | 30/5/2022 | 17/6/2026 | The Smush WordPress plugin before 3.9.9 does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious… | |
| Modificada | Alta (7.5) | 2.5% | — | Wpmudev Smush Image Compression AND Optimization | 6/10/2017 | 17/6/2026 | The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal. |