Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2564▼ 303 respecto a la semana anterior
Críticas / altas1351▲ 100 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.25% | — | TemplatelyAI | 18/8/2026 | 20/8/2026 | Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions. | |
| Aplazada | Alta (8.8) | 1.3% | — | TemplatelyAI | 15/8/2026 | 20/8/2026 | The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.7.1 via the fetch_remote_file function. This is due to a filename validation/destination mismatch in… | |
| Aplazada | Media (6.5) | 0.34% | — | TemplatelyAI | 7/8/2026 | 26/8/2026 | The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwrite the administrator's stored cloud service connection with an account under their control, disconnecting the legitimate administrator and redirecting the… | |
| Aplazada | Alta (7.7) | 0.37% | — | Wpdeveloper TemplatelyAI | 27/4/2026 | 17/6/2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1. | |
| Aplazada | Media (5.3) | 0.27% | — | TemplatelyAI | 10/1/2026 | 17/6/2026 | The Templately plugin for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 3.4.8. This is due to inadequate input validation in the `save_template_to_file()` function where user-controlled parameters like `session_id`, `content_id`, and `ai_page_ids` are used to construct file… | |
| Aplazada | Crítica (10) | 0.49% | — | Wpdeveloper TemplatelyAI | 20/8/2025 | 17/6/2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data. This issue affects Templately: from n/a through 3.2.7. | |
| Modificada | Crítica (9.8) | 1.7% | — | Templately | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2. | |
| Aplazada | Media (6.5) | 0.38% | — | Wpdeveloper TemplatelyAI | 29/10/2024 | 17/6/2026 | Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through <= 3.1.5. | |
| Aplazada | Media (5.4) | 0.39% | — | Wpdeveloper TemplatelyAI | 29/10/2024 | 17/6/2026 | Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through <= 3.1.5. | |
| Modificada | Alta (7.5) | 0.61% | — | Templately | 6/11/2023 | 17/6/2026 | The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call, allowing unauthenticated users to delete arbitrary posts. |