Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2952▲ 10 respecto a la semana anterior

Críticas / altas1451▲ 185 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-18261	Pendiente de análisis	Media (5.7)	0.19%	—	Drupal Powerful Surveys^AI	25/8/2026	28/8/2026	Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: ..
CVE-2025-28878	Modificada	Media (4.8)	0.28%	—	Willbrubaker Awesome Surveys	11/3/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Will Brubaker Awesome Surveys awesome-surveys allows Stored XSS.This issue affects Awesome Surveys: from n/a through <= 2.0.10.
CVE-2024-55998	Aplazada	Media (5.4)	0.41%	—	Mare.io Popup Surveys AND Polls^AI	16/12/2024	17/6/2026	Missing Authorization vulnerability in Eric Sloan Popup Surveys & Polls for WordPress (Mare.io) popup-surveys allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys & Polls for WordPress (Mare.io): from n/a through <= 1.36.
CVE-2022-29728	Modificada	Media (6.1)	0.57%	—	Surveysparrow Enterprise Survey Software	11/5/2022	17/6/2026	Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting (XSS) vulnerability in the test parameter.
CVE-2022-29727	Modificada	Media (5.4)	2.4%	—	Surveysparrow Enterprise Survey Software	11/5/2022	17/6/2026	Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup parameter.
CVE-2017-1002022	Modificada	Crítica (9.8)	3.6%	—	Surveys Project Surveys	14/9/2017	17/6/2026	Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.
CVE-2017-1002021	Modificada	Crítica (9.8)	3.6%	—	Surveys Project Surveys	14/9/2017	17/6/2026	Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query.
CVE-2017-1002020	Modificada	Crítica (9.8)	3.6%	—	Surveys Project Surveys	14/9/2017	17/6/2026	Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query.