Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3042▲ 473 respecto a la semana anterior
Críticas / altas1452▲ 235 respecto a la semana anterior
Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior
Sin puntuar (sin CVSS)365▲ 156 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.3) | 0.18% | — | Search Simple FieldsAI | 27/5/2026 | 17/6/2026 | The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the search_simple_fields_options() function in functions_admin.php. This makes it possible for unauthenticated attackers to modify the… | |
| Aplazada | Media (6.9) | 0.53% | — | Simple FieldsAI | 17/5/2026 | 17/6/2026 | Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting null bytes into the wp_abspath parameter on PHP versions before 5.3.4. Attackers can supply malicious wp_abspath values to simple_fields.php to… | |
| Modificada | Alta (8.8) | 0.67% | — | Simple Fields Project Simple Fields | 14/8/2019 | 17/6/2026 | The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. | |
| Modificada | Media (6.1) | 0.95% | — | Simple Fields Project Simple Fields | 13/8/2019 | 17/6/2026 | The simple-fields plugin before 1.4.11 for WordPress has XSS. |