Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2847▼ 151 respecto a la semana anterior

Críticas / altas1373▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 257 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-49284	Aplazada	Media (4.3)	0.16%	—	Wp-buy Wp-maintenance-mode-site-under-construction^AI	6/6/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Maintenance Mode & Site Under Construction wp-maintenance-mode-site-under-construction allows Cross Site Request Forgery.This issue affects WP Maintenance Mode & Site Under Construction: from n/a through <= 4.3.
CVE-2022-1576	Modificada	Media (6.5)	0.52%	—	Themeisle WP Maintenance Mode & Coming Soon	11/7/2022	17/6/2026	The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack
CVE-2018-20156	Modificada	Alta (7.2)	1.5%	—	Designmodo WP Maintenance Mode	14/12/2018	17/6/2026	The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.
CVE-2018-20155	Modificada	Media (4.3)	0.78%	—	Designmodo WP Maintenance Mode	14/12/2018	17/6/2026	The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.
CVE-2018-20154	Modificada	Media (4.3)	0.98%	—	Designmodo WP Maintenance Mode	14/12/2018	17/6/2026	The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
CVE-2013-3250	Modificada	Media (6.8)	0.95%	—	Wordpress WP Maintenance Mode Plugin	21/6/2013	16/6/2026	Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.