Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2847▼ 151 respecto a la semana anterior

Críticas / altas1373▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 257 respecto a la semana anterior

15 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-60137	Aplazada	Media (4.3)	0.14%	—	Galaxyweblinks Post Featured Video^AI	26/9/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through <= 1.7.
CVE-2025-32183	Aplazada	Media (6.5)	0.40%	—	Galaxyweblinks Video Playlist FOR Youtube^AI	4/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through <= 6.7.1.
CVE-2025-31872	Aplazada	Media (5.3)	0.37%	—	Galaxyweblinks WP Clone ANY Post Type^AI	1/4/2025	17/6/2026	Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through <= 3.6.
CVE-2025-31871	Aplazada	Media (4.7)	0.36%	—	Galaxyweblinks WP Clone ANY Post Type^AI	1/4/2025	17/6/2026	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through <= 3.6.
CVE-2023-45653	Modificada	Alta (8.8)	0.21%	—	Galaxyweblinks Video Playlist FOR Youtube	16/10/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions.
CVE-2022-42485	Modificada	Media (5.4)	0.38%	—	Galaxyweblinks Gallery With Thumbnail Slider	21/3/2023	17/6/2026	Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin <= 6.0 versions.
CVE-2022-23767	Modificada	Crítica (9.8)	0.95%	—	Hanssak Securegate Hanssak Weblink	19/9/2022	17/6/2026	This vulnerability of SecureGate is SQL-Injection using login without password. A path traversal vulnerability is also identified during file transfer. An attacker can take advantage of these vulnerabilities to perform various attacks such as obtaining privileges and executing remote code, thereby taking over the…
CVE-2014-8593	Modificada	Media (4.3)	1.9%	—	Allomani Weblinks	4/11/2014	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default URI to admin.php or the (2) id parameter to admin.php or (3) go.php.
CVE-2014-8766	Modificada	Alta (7.5)	2.1%	—	Allomani Weblinks	14/10/2014	17/6/2026	Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in a browse action to index.php or (2) unspecified parameters to admin.php.
CVE-2006-7247	Modificada	Alta (7.5)	1.1%	—	Joomla COM Weblinks	6/9/2012	16/6/2026	SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
CVE-2010-4938	Modificada	Alta (7.5)	0.90%	—	Joomla COM Weblinks	9/10/2011	16/6/2026	SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2010-2679	Modificada	Alta (7.5)	0.97%	—	Joomla COM Weblinks Joomla!	8/7/2010	16/6/2026	SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
CVE-2008-3083	Modificada	Alta (7.5)	0.97%	—	Brightcode Weblinks Module Joomla COM Brightweblinks	9/7/2008	16/6/2026	SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2006-2848	Modificada	Media (5)	1.8%	—	Full Revolution Aspweblinks	6/6/2006	16/6/2026	links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified txtAdministrativePassword field.
CVE-2006-2847	Modificada	Alta (7.5)	1.3%	—	Full Revolution Aspweblinks	6/6/2006	16/6/2026	SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID parameter.