Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2997▼ 66 respecto a la semana anterior
Críticas / altas1460▲ 109 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaAlta (7.6)0.38%—Wcvendors WC Vendors MarketplaceAI17/9/202617/9/2026
Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.
AplazadaAlta (8.5)0.36%—Wcvendors WC Vendors MarketplaceAI25/6/202625/6/2026
Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.
AplazadaAlta (7.6)0.42%—Wcvendors WC Vendors MarketplaceAI6/6/202517/6/2026
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WCVendors WC Vendors Marketplace wc-vendors allows Blind SQL Injection.This issue affects WC Vendors Marketplace: from n/a through <= 2.5.6.
ModificadaMedia (5.4)0.69%—Wcvendors WC Vendors Marketplace6/2/202317/6/2026
The WC Vendors Marketplace WordPress plugin before 2.4.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Orbitaley — Vulnerabilidades