Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-42383	Aplazada	Alta (7.6)	0.38%	—	Yithemes Yith Woocommerce Product Add-ons^AI	20/5/2026	24/7/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
CVE-2023-46635	Aplazada	Media (5.3)	0.35%	—	Yithemes Yith Woocommerce Product Add-ons^AI	2/1/2025	17/6/2026	Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.2.0.
CVE-2024-50448	Modificada	Media (6.1)	0.33%	—	Yithemes Yith Woocommerce Product Add-ons	28/10/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.14.1.
CVE-2024-47367	Aplazada	Alta (7.1)	0.32%	—	Yithemes Yith Woocommerce Product Add-ons^AI	6/10/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.13.0.
CVE-2024-35680	Modificada	Media (5.3)	0.33%	—	Yithemes Yith Woocommerce Product Add-ons	10/6/2024	17/6/2026	Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.9.2.
CVE-2024-27994	Aplazada	Alta (7.1)	0.40%	—	Yithemes Yith Woocommerce Product Add-ons^AI	21/3/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.5.0.
CVE-2023-49777	Modificada	Alta (8.8)	0.69%	—	Yithemes Yith Woocommerce Product Add-ons	31/12/2023	17/6/2026	Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.
CVE-2019-16251	Modificada	Media (4.3)	0.95%	—	Yithemes Yith Woocommerce Wishlist Yithemes Yith Woocommerce Compare Yithemes Yith Woocommerce Quick View Yithemes Yith Woocommerce Zoom Magnifier+34	31/10/2019	17/6/2026	plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.