Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 306 respecto a la semana anterior

Críticas / altas1351▲ 96 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-17008	Aplazada	Media (5.3)	0.16%	—	Fullworksplugins Quick Paypal Payments^AI	12/8/2026	26/8/2026	The Quick Paypal Payments WordPress plugin through 5.7.50 does not verify the paid amount, receiver, or payment status in its PayPal IPN handler and marks an order paid on an order-token match alone, so a buyer who pays an arbitrary small amount can have a full-price order marked paid.
CVE-2025-27003	Aplazada	Media (4.3)	0.13%	—	Fullworksplugins Quick Paypal Payments^AI	5/9/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross Site Request Forgery.This issue affects Quick Paypal Payments: from n/a through <= 5.7.46.
CVE-2023-25714	Aplazada	Alta (7.5)	0.76%	—	Fullworksplugins Quick Paypal Payments^AI	9/12/2024	17/6/2026	Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 5.7.25.
CVE-2023-1554	Modificada	Media (4.8)	0.47%	—	Fullworksplugins Quick Paypal Payments	2/5/2023	17/6/2026	The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2023-23889	Modificada	Media (5.4)	0.36%	—	Fullworksplugins Quick Paypal Payments	25/4/2023	17/6/2026	Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVE-2023-25713	Modificada	Media (6.1)	0.41%	—	Fullworksplugins Quick Paypal Payments	7/4/2023	17/6/2026	Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVE-2023-25702	Modificada	Media (4.8)	0.39%	—	Fullworksplugins Quick Paypal Payments	7/4/2023	17/6/2026	Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.