Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-2381	Aplazada	Media (6.5)	0.40%	—	Woocommerce Stripe Payment Gateway^AI	16/6/2026	17/6/2026	The WooCommerce Stripe Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_pay_for_order()` function in all versions up to, and including, 10.7.0 This is due to a missing order ownership or order_key verification when processing payment…
CVE-2026-45217	Aplazada	Media (6.5)	0.46%	—	Themehigh Stripe Payment Gateway FOR Woocommerce^AI	25/5/2026	24/7/2026	Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7.
CVE-2023-35049	Analizada	Crítica (9.8)	0.61%	—	Woocommerce Stripe Payment Gateway	19/6/2024	17/6/2026	Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0.
CVE-2023-44999	Modificada	Alta (8.8)	0.22%	—	Woocommerce Stripe Payment Gateway	27/3/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.0.
CVE-2023-34000	Modificada	Alta (7.5)	1.2%	—	Woocommerce Stripe Payment Gateway	14/6/2023	17/6/2026	Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.