Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior

Críticas / altas1403▲ 41 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

14 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-81802	Aplazada	Media (6.5)	0.33%	—	Wpevently^AI	8/9/2026	8/9/2026	Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.
CVE-2026-81761	Aplazada	Media (4.3)	0.27%	—	Wpevently^AI	28/8/2026	28/8/2026	Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.
CVE-2026-81759	Aplazada	Media (5.4)	0.29%	—	Wpevently^AI	28/8/2026	28/8/2026	Contributor Broken Access Control in WpEvently <= 5.5.0 versions.
CVE-2026-45441	Aplazada	Alta (7.5)	0.37%	—	Wpevently^AI	15/6/2026	17/6/2026	Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.
CVE-2024-32110	Aplazada	Media (4.3)	0.10%	—	Magepeople Wpevently^AI	11/6/2026	23/7/2026	Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This issue affects WpEvently: from n/a through 4.1.2.
CVE-2026-25361	Aplazada	Alta (7.1)	0.18%	—	Magepeopleteam Wpevently^AI	25/3/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress allows Reflected XSS.This issue affects WpEvently: from n/a through <= 5.1.4.
CVE-2026-32354	Aplazada	Media (5.3)	0.33%	—	Magepeopleteam Wpevently^AI Magepeopleteam Mage-eventpress^AI	13/3/2026	17/6/2026	Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through < 5.1.9.
CVE-2026-23549	Aplazada	Crítica (9.8)	0.39%	—	Magepeopleteam Wpevently^AI	19/2/2026	17/6/2026	Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.1.1.
CVE-2026-24954	Aplazada	Alta (8.8)	0.42%	—	Magepeopleteam Wpevently^AI	3/2/2026	17/6/2026	Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.0.8.
CVE-2026-24942	Aplazada	Media (4.3)	0.13%	—	Magepeopleteam Wpevently^AI Magepeopleteam Mage-eventpress^AI	3/2/2026	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through <= 5.1.1.
CVE-2025-54705	Aplazada	Media (4.3)	0.25%	—	Magepeopleteam Wpevently^AI	14/8/2025	17/6/2026	Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 4.4.6.
CVE-2025-32145	Aplazada	Alta (8.8)	0.48%	—	Magepeopleteam Wpevently^AI	10/4/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 4.3.6.
CVE-2025-30895	Aplazada	Alta (7.5)	0.81%	—	Magepeopleteam Wpevently^AI	27/3/2025	17/6/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in magepeopleteam WpEvently mage-eventpress allows PHP Local File Inclusion.This issue affects WpEvently: from n/a through <= 4.2.9.
CVE-2024-49703	Aplazada	Media (6.5)	0.26%	—	Magepeopleteam Wpevently^AI	24/10/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress.This issue affects WpEvently: from n/a through <= 4.2.5.