Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior
Críticas / altas1384▲ 157 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.4) | 0.28% | — | Bootstrapped Visual Link PreviewAI | 25/6/2026 | 26/6/2026 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. | |
| Aplazada | Media (6.5) | 0.37% | — | Bootstrapped Visual Link PreviewAI | 15/6/2026 | 17/6/2026 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. | |
| Aplazada | Media (6) | 0.21% | — | Bootstrapped Visual Link PreviewAI | 8/4/2026 | 24/7/2026 | Server-Side Request Forgery (SSRF) vulnerability in Brecht Visual Link Preview visual-link-preview allows Server Side Request Forgery.This issue affects Visual Link Preview: from n/a through <= 2.3.0. | |
| Aplazada | Media (6.5) | 0.35% | — | Bootstrapped Visual Link PreviewAI | 3/2/2026 | 17/6/2026 | Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Link Preview: from n/a through <= 2.2.9. | |
| Aplazada | Media (6.4) | 0.22% | — | Bootstrapped Visual Link PreviewAI | 5/11/2025 | 17/6/2026 | The Visual Link Preview plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's visual-link-preview shortcode in versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,… | |
| Modificada | Media (5.4) | 0.64% | — | Bootstrapped Visual Link Preview | 20/9/2021 | 17/6/2026 | The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get and search through title and content of Draft post, 2) Get title of a… |