Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.5) | 0.42% | — | Couponaffiliates Coupon AffiliatesAI | 15/6/2026 | 17/6/2026 | Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. | |
| Aplazada | Alta (7.1) | 0.25% | — | Couponaffiliates Coupon AffiliatesAI | 15/6/2026 | 17/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions. | |
| Aplazada | Media (5.3) | 0.27% | — | Elliot Sowersby Relywp Coupon AffiliatesAI | 27/10/2025 | 17/6/2026 | Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coupon Affiliates: from n/a through <= 7.2.0. | |
| Aplazada | Media (5.5) | 0.22% | — | Elliot Sowersby Rely WP Coupon AffiliatesAI | 22/9/2025 | 17/6/2026 | Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.8.0. | |
| Aplazada | Media (6.5) | 0.25% | — | Relywp Coupon AffiliatesAI | 20/8/2025 | 17/6/2026 | Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.4.0. | |
| Aplazada | Media (6.5) | 0.17% | — | Relywp Coupon AffiliatesAI | 16/7/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Cross Site Request Forgery.This issue affects Coupon Affiliates: from n/a through <= 6.4.0. | |
| Aplazada | Media (6.1) | 0.42% | — | Couponaffiliates Coupon AffiliatesAI | 18/4/2025 | 17/6/2026 | The Coupon Affiliates – Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the commission_summary parameter in all versions up to, and including, .6.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated… | |
| Aplazada | Media (6.5) | 0.49% | — | Couponaffiliates Coupon AffiliatesAI | 13/12/2024 | 17/6/2026 | The The Coupon Affiliates – Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.16.7.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This… | |
| Aplazada | Alta (7.1) | 0.40% | — | Relywp Coupon AffiliatesAI | 19/3/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage.This issue affects Coupon Affiliates: from n/a through <= 5.12.7. | |
| Modificada | Media (6.1) | 0.38% | — | Relywp Coupon Affiliates | 26/6/2023 | 17/6/2026 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin <= 5.4.3 versions. |