Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2535▼ 358 respecto a la semana anterior

Críticas / altas1338▲ 66 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-6268	Aplazada	Alta (7.1)	0.28%	—	Eventpress^AI	27/5/2026	17/6/2026	The EventPress WordPress theme before 22.2 does not sanitize or escape the 'id' parameter in the eventpress_customizer_notify_dismiss_action AJAX handler before outputting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against logged-in users.
CVE-2026-32354	Aplazada	Media (5.3)	0.33%	—	Magepeopleteam Wpevently^AI Magepeopleteam Mage-eventpress^AI	13/3/2026	17/6/2026	Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through < 5.1.9.
CVE-2026-24942	Aplazada	Media (4.3)	0.13%	—	Magepeopleteam Wpevently^AI Magepeopleteam Mage-eventpress^AI	3/2/2026	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through <= 5.1.1.
CVE-2025-66082	Aplazada	Media (5.3)	0.26%	—	Magepeopleteam WP Evently^AI Magepeopleteam Mage Eventpress^AI	21/11/2025	17/6/2026	Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4.
CVE-2024-51861	Aplazada	Media (6.5)	0.30%	—	Duogeek Eventpress^AI	19/11/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek EventPress wp-eventpress allows Stored XSS.This issue affects EventPress: from n/a through <= 1.0.0.