Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3028▼ 62 respecto a la semana anterior

Críticas / altas1422▲ 60 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-66428	Aplazada	Media (4.3)	0.14%	—	Ljapps WP Google Review Slider^AI	27/7/2026	27/7/2026	Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions.
CVE-2026-66427	Aplazada	Alta (7.6)	0.38%	—	Ljapps WP Google Review Slider^AI	27/7/2026	27/7/2026	Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.
CVE-2026-39451	Aplazada	Media (6.3)	0.25%	—	Ljapps WP Google Review Slider^AI	15/6/2026	17/6/2026	Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions.
CVE-2024-11109	Analizada	Media (4.8)	0.31%	—	Ljapps WP Google Review Slider	15/5/2025	17/6/2026	The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVE-2024-2310	Analizada	Media (5.9)	0.31%	—	Ljapps WP Google Review Slider	26/4/2024	17/6/2026	The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2023-0259	Modificada	Alta (8.8)	0.92%	—	Ljapps WP Google Review Slider	13/2/2023	17/6/2026	The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVE-2022-4242	Modificada	Media (4.8)	0.54%	—	Ljapps WP Google Review Slider	26/12/2022	17/6/2026	The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).