Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2750▲ 27 respecto a la semana anterior

Críticas / altas1468▲ 334 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-66687	Aplazada	Media (6.5)	0.22%	—	Wpbookingly^AI	13/8/2026	14/8/2026	Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
CVE-2026-25444	Aplazada	Media (4.3)	0.25%	—	Magepeople INC Wpbookingly^AI	26/5/2026	24/7/2026	Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.
CVE-2026-27405	Aplazada	Media (6.5)	0.42%	—	Magepeople Wpbookingly^AI	20/5/2026	24/7/2026	Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.
CVE-2026-32384	Aplazada	Alta (7.5)	0.51%	—	Magepeopleteam Wpbookingly^AI	13/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly service-booking-manager allows PHP Local File Inclusion.This issue affects WpBookingly: from n/a through <= 1.2.9.
CVE-2025-32607	Aplazada	Crítica (9.8)	0.88%	—	Magepeopleteam Wpbookingly^AI	11/4/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in magepeopleteam WpBookingly service-booking-manager allows Object Injection.This issue affects WpBookingly: from n/a through <= 1.3.0.