Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2976▼ 107 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-57418	Aplazada	Media (6.5)	0.34%	—	Webventures Client Invoicing BY Sprout Invoices^AI	13/7/2026	13/7/2026	Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.13.
CVE-2026-39562	Aplazada	Media (5.3)	0.29%	—	Boldgrid Client Invoicing BY Sprout Invoices^AI	8/4/2026	24/7/2026	Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.10.
CVE-2026-32401	Aplazada	Alta (7.2)	0.57%	—	Boldgrid Client Invoicing BY Sprout Invoices^AI Sprout Invoices^AI	13/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.9.
CVE-2026-25364	Aplazada	Media (5.3)	0.22%	—	Webventures Client Invoicing BY Sprout Invoices^AI	19/2/2026	17/6/2026	Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.8.
CVE-2025-64227	Aplazada	Crítica (9.8)	0.38%	—	Boldgrid Client Invoicing BY Sprout Invoices^AI	18/12/2025	5/10/2026	Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7.
CVE-2025-64229	Aplazada	Media (4.3)	0.19%	—	Webventures Client Invoicing BY Sprout Invoices^AI	29/10/2025	17/6/2026	Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7.
CVE-2025-24606	Aplazada	Media (6.4)	0.27%	—	Webventures Client Invoicing BY Sprout Invoices^AI	27/1/2025	17/6/2026	Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.1.
CVE-2024-53819	Aplazada	Media (5.3)	0.49%	—	Webventures Client Invoicing BY Sprout Invoices^AI	9/12/2024	17/6/2026	Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.0.
CVE-2021-24787	Modificada	Media (4.8)	0.62%	—	Webventures Client Invoicing BY Sprout Invoices	17/11/2021	17/6/2026	The Client Invoicing by Sprout Invoices WordPress plugin before 19.9.7 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed