Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-43213	Aplazada	Alta (7.1)	0.33%	—	Multivendorx WC Marketplace^AI	12/8/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17.
CVE-2024-24703	Aplazada	Alta (8.6)	0.39%	—	Multivendorx WC Marketplace^AI	11/6/2024	17/6/2026	Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25.
CVE-2024-30433	Aplazada	Media (6.5)	0.36%	—	Multivendorx WC Marketplace^AI	29/3/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Stored XSS.This issue affects WC Marketplace: from n/a through 4.1.3.
CVE-2022-2657	Modificada	Media (4.3)	0.32%	—	Wc-marketplace Multivendor Marketplace Solution FOR Woocommerce - WC Marketplace	5/9/2022	17/6/2026	The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them and suspend vendors (reporter by the submitter) or update arbitrary order status (identified by…
CVE-2017-18592	Modificada	Alta (7.5)	1.4%	—	Wc-marketplace WC Catalog Enquiry	27/8/2019	17/6/2026	The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.