Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-62063	Aplazada	Media (5.4)	0.17%	—	Magepeople Wptravelly^AI	1/10/2026	1/10/2026	Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.
CVE-2026-27089	Aplazada	Alta (7.5)	0.39%	—	Wptravelly^AI	15/6/2026	17/6/2026	Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.
CVE-2026-27331	Aplazada	Media (6.3)	0.26%	—	Magepeople Wptravelly^AI	26/5/2026	24/7/2026	Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5.
CVE-2026-39565	Aplazada	Media (4.3)	0.23%	—	Magepeopleteam Wptravelly Tour-booking-manager^AI	8/4/2026	20/7/2026	Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through <= 2.1.7.
CVE-2025-30891	Aplazada	Alta (8.8)	0.67%	—	Magepeopleteam Wptravelly^AI	27/3/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through <= 1.8.7.
CVE-2025-22737	Aplazada	Media (5.3)	0.35%	—	Magepeopleteam Wptravelly^AI	15/1/2025	17/6/2026	Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through <= 1.8.5.
CVE-2024-43212	Aplazada	Alta (7.5)	0.56%	—	Magepeople Wptravelly^AI	1/11/2024	17/6/2026	Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.
CVE-2024-0434	Aplazada	Media (5.3)	0.39%	—	Wptravelly^AI	29/5/2024	17/6/2026	The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbm_new_place_save' function in all versions up to, and including, 1.7.1. This makes it possible for unauthenticated attackers to…
CVE-2024-32450	Aplazada	Media (4.3)	0.21%	—	Magepeople Wptravelly^AI	15/4/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team WpTravelly.This issue affects WpTravelly: from n/a through 1.6.0.