Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2686▼ 84 respecto a la semana anterior

Críticas / altas1444▲ 301 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-46494	Aplazada	Alta (7.1)	0.17%	—	Themesgrove Widgetkit PRO^AI	7/1/2026	30/9/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit Pro allows Reflected XSS.This issue affects WidgetKit Pro: from n/a through 1.13.1.
CVE-2025-8779	Aplazada	Media (6.4)	0.22%	—	Widgetkit ALL IN ONE Addons FOR Elementor^AI	13/12/2025	17/6/2026	The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Team and Countdown widgets in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
CVE-2025-49074	Aplazada	Media (6.5)	0.20%	—	ABU Huraira BIN Aman Widgetkit FOR Elementor^AI	6/6/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Abu Huraira Bin Aman WidgetKit widgetkit-for-elementor allows Stored XSS.This issue affects WidgetKit: from n/a through <= 2.5.4.
CVE-2024-34548	Aplazada	Media (6.5)	0.26%	—	Themesgrove Widgetkit^AI	8/5/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.4.8.
CVE-2024-33908	Aplazada	Media (5.3)	0.40%	—	Themesgrove Widgetkit^AI	6/5/2024	17/6/2026	Missing Authorization vulnerability in Themesgrove WidgetKit.This issue affects WidgetKit: from n/a through 2.5.0.