Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2494▼ 451 respecto a la semana anterior
Críticas / altas1280▼ 7 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 463 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaAlta (8.6)0.73%—WP Media Folder AddonAI29/7/202610/8/2026
The wp-media-folder-addon WordPress plugin before 4.1.7 does not validate a user-supplied parameter before using it in a file read operation in two AJAX actions available to unauthenticated users, leading to Arbitrary File Disclosure and Server-Side Request Forgery on sites where a cloud storage connection has been…
AplazadaAlta (7.5)0.50%—Joomunited WP Media FolderAI17/6/202617/6/2026
Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions.
AplazadaMedia (4.3)0.34%—Joomunited WP Media FolderAI11/4/202417/6/2026
Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.
AplazadaMedia (5.4)0.36%—Joomunited WP Media FolderAI11/4/202417/6/2026
Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.
ModificadaAlta (8.8)0.64%—Joomunited WP Media Folder26/2/202417/6/2026
Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.