Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-39305	Aplazada	Media (5.3)	0.44%	—	Dash Labs YET Another Stars Rating^AI	13/12/2024	17/6/2026	Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through <= 3.4.3.
CVE-2023-37867	Modificada	Alta (8.1)	0.40%	—	YET Another Stars Rating Project YET Another Stars Rating	30/11/2023	17/6/2026	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8.
CVE-2022-40699	Modificada	Media (6.1)	0.38%	—	Yasr - YET Another Stars Rating Project Yasr - YET Another Stars Rating	16/3/2023	17/6/2026	Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions.
CVE-2022-23980	Modificada	Media (6.1)	0.80%	—	YET Another Stars Rating Project YET Another Stars Rating	4/2/2022	17/6/2026	Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.
CVE-2015-9465	Modificada	Alta (8.8)	1.9%	—	YET Another Stars Rating Project YET Another Stars Rating	10/10/2019	17/6/2026	The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.