Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior
Críticas / altas1277▼ 72 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.9) | 0.66% | — | Store ExporterAI | 18/9/2026 | 18/9/2026 | The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8.0 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with shop manager-level access and above,… | |
| Aplazada | Alta (7.5) | 0.43% | — | Josh Kohlbach Store ExporterAI | 6/11/2025 | 17/6/2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through <= 2.7.6. | |
| Aplazada | Alta (7.1) | 0.41% | — | Josh Kohlbach Jigoshop - Store ExporterAI | 19/11/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Jigoshop – Store Exporter jigoshop-exporter allows Reflected XSS.This issue affects Jigoshop – Store Exporter: from n/a through <= 1.5.8. | |
| Modificada | Media (6.1) | 0.39% | — | Visser Store Exporter FOR Woocommerce | 1/10/2024 | 17/6/2026 | The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.2.1. This makes it possible for… | |
| Modificada | Media (6.1) | 0.35% | — | Visser Store Exporter FOR Woocommerce | 6/11/2023 | 17/6/2026 | Unauth. Reflected Cross-Site Scripting') vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin <= 2.7.2 versions. | |
| Modificada | Media (6.1) | 2.3% | — | Visser Store Exporter FOR Woocommerce | 7/2/2022 | 17/6/2026 | The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page. | |
| Modificada | Crítica (9.8) | 2.1% | — | Visser Store Exporter FOR Woocommerce | 27/8/2019 | 17/6/2026 | The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation. |