Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior

Críticas / altas1419▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-57690	Aplazada	Media (4.3)	0.14%	—	Werkstatt^AI	2/7/2026	2/7/2026	Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions.
CVE-2026-57689	Aplazada	Media (4.3)	0.27%	—	Werkstatt^AI	2/7/2026	2/7/2026	Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions.
CVE-2026-27414	Aplazada	Alta (8.8)	0.52%	—	Werkstatt^AI	2/7/2026	2/7/2026	Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.
CVE-2026-6674	Aplazada	Media (6.5)	0.41%	—	CMS FUR Motorrad Werkstatten^AI	21/4/2026	17/6/2026	The Plugin: CMS für Motorrad Werkstätten plugin for WordPress is vulnerable to SQL Injection via the 'arttype' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for…
CVE-2025-69314	Aplazada	Alta (8.1)	0.47%	—	Fuelthemes Werkstatt^AI	22/1/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through < 4.8.3.
CVE-2025-63017	Aplazada	Alta (7.5)	0.59%	—	Fuelthemes Werkstatt Plugin^AI	22/1/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes WerkStatt Plugin werkstatt-plugin allows PHP Local File Inclusion.This issue affects WerkStatt Plugin: from n/a through <= 1.6.6.