Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2684▼ 86 respecto a la semana anterior
Críticas / altas1444▲ 301 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 4.5% | — | Automattic WP Super Cache | 1/6/2021 | 17/6/2026 | The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue. | |
| Modificada | Alta (7.2) | 1.9% | — | Automattic WP Super Cache | 1/6/2021 | 17/6/2026 | The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is due to an incomplete fix of CVE-2021-24209. | |
| Modificada | Alta (7.2) | 28% | — | Automattic WP Super Cache | 5/4/2021 | 17/6/2026 | The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $cache_path check in the WP Super Cache Settings -> Cache Location option. Direct access to the wp-cache-config.php file is not prohibited, so this vulnerability… | |
| Modificada | Crítica (9.8) | 74% | — | Automattic WP Super CacheBoldgrid W3 Total Cache | 12/2/2020 | 16/6/2026 | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability | |
| Modificada | Alta (8.8) | 13% | — | Automattic WP Super Cache | 7/2/2020 | 16/6/2026 | WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution | |
| Modificada | Media (6.1) | 1.5% | — | Automattic WP Super Cache | 7/2/2020 | 16/6/2026 | WordPress Super Cache Plugin 1.3 has XSS. |