Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2713▼ 329 respecto a la semana anterior

Críticas / altas1265▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)8→ sin cambios respecto a la semana anterior

Sin puntuar (sin CVSS)214▼ 108 respecto a la semana anterior

403.160 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-39771	Aplazada	Alta (8.5)	0.29%	—	Buddyboss Platform^AI	6/10/2026	6/10/2026	Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
CVE-2026-39770	Aplazada	Crítica (10)	0.42%	—	Doctreat^AI	6/10/2026	6/10/2026	Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
CVE-2026-39769	Aplazada	Alta (7.5)	0.48%	—	Graphina^AI	6/10/2026	6/10/2026	Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.
CVE-2026-39768	Rechazada	Sin puntuar	0.19%	—	Cleantalk Security Malware Scan^AI	6/10/2026	7/10/2026	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive.
CVE-2026-39767	Aplazada	Media (6.5)	0.41%	—	Wpbase Cache^AI	6/10/2026	6/10/2026	Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.
CVE-2026-39766	Aplazada	Alta (7.1)	0.25%	—	Reputeinfosystems Arforms^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.
CVE-2026-39765	Aplazada	Alta (7.2)	0.46%	—	Challan^AI	6/10/2026	6/10/2026	Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
CVE-2026-39764	Aplazada	Crítica (9.3)	0.30%	—	Radiustheme Radius Booking^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
CVE-2026-39762	Aplazada	Media (6.5)	0.33%	—	Autoship Cloud^AI	6/10/2026	6/10/2026	Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.
CVE-2026-39761	Aplazada	Crítica (9.8)	0.48%	—	Metabox Meta BOX AIO^AI	6/10/2026	6/10/2026	Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
CVE-2026-39759	Aplazada	Crítica (9.9)	0.48%	—	Amentotech Workreap^AI	6/10/2026	6/10/2026	Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
CVE-2026-39758	Aplazada	Alta (7.1)	0.25%	—	Midtrans Woocommerce^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.
CVE-2026-39757	Aplazada	Crítica (9.9)	0.48%	—	Taskbot^AI	6/10/2026	6/10/2026	Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.
CVE-2026-39756	Aplazada	Media (6.5)	0.26%	—	Wappointment^AI	6/10/2026	6/10/2026	Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.
CVE-2026-39755	Aplazada	Crítica (9.9)	0.45%	—	WP Duplicate^AI	6/10/2026	6/10/2026	Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.
CVE-2026-39754	Aplazada	Media (6.5)	0.33%	—	Piotnet Addons FOR Elementor^AI	6/10/2026	6/10/2026	Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.
CVE-2026-39753	Aplazada	Crítica (9.8)	0.45%	—	Taskbot^AI	6/10/2026	6/10/2026	Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
CVE-2026-39752	Aplazada	Alta (7.7)	0.45%	—	Jobs^AI	6/10/2026	6/10/2026	Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.
CVE-2026-39751	Aplazada	Alta (7.5)	0.32%	—	Payplug FOR Woocommerce^AI	6/10/2026	6/10/2026	Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
CVE-2026-39750	Aplazada	Alta (7.1)	0.24%	—	Storegrowth Smart Sales Booster FOR Woocommerce^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce \| BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.
CVE-2026-39749	Aplazada	Media (6.5)	0.28%	—	APP FOR Cloudflare^AI	6/10/2026	6/10/2026	Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
CVE-2026-39748	Aplazada	Alta (7.1)	0.24%	—	Thememove Edumall^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
CVE-2026-39747	Aplazada	Alta (8.5)	0.34%	—	Xtendify Woffice^AI	6/10/2026	6/10/2026	Subscriber SQL Injection in Woffice <= 5.4.35 versions.
CVE-2026-39746	Aplazada	Crítica (9.3)	0.38%	—	Fs-code Booknetic^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
CVE-2026-39745	Aplazada	Alta (7.1)	0.24%	—	Bestwebsoft Contact Form TO DB^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.