Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3001▼ 62 respecto a la semana anterior

Críticas / altas1373▲ 34 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)459▼ 50 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-32303	Aplazada	Crítica (9.3)	0.28%	—	Mojoomla Wpchurch^AI	7/1/2026	30/9/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla WPCHURCH allows Blind SQL Injection.This issue affects WPCHURCH: from n/a through 2.7.0.
CVE-2025-31643	Aplazada	Alta (8.8)	0.33%	—	Dasinfomedia Wpchurch^AI	7/1/2026	30/9/2026	Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.This issue affects WPCHURCH: from n/a through 2.7.0.
CVE-2025-31642	Aplazada	Alta (7.1)	0.18%	—	Dasinfomedia Wpchurch^AI	7/1/2026	30/9/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dasinfomedia WPCHURCH allows Reflected XSS.This issue affects WPCHURCH: from n/a through 2.7.0.
CVE-2025-32304	Aplazada	Alta (8.1)	0.49%	—	Mojoomla Wpchurch^AI	6/1/2026	30/9/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mojoomla WPCHURCH allows PHP Local File Inclusion.This issue affects WPCHURCH: from n/a through 2.7.0.
CVE-2024-11502	Analizada	Media (5.4)	0.31%	—	Wpchurchteam Planning Center Online Giving	15/5/2025	17/6/2026	The Planning Center Online Giving WordPress plugin through 1.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVE-2025-25157	Aplazada	Alta (7.1)	0.30%	—	Wpchurchteam WP Church Center^AI	3/3/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpchurchteam WP Church Center wp-church-center allows Reflected XSS.This issue affects WP Church Center: from n/a through <= 1.3.3.
CVE-2017-14845	Modificada	Alta (8.8)	2.7%	—	Dasinfomedia Wpchurch Church Management System	28/9/2017	17/6/2026	Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.