Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 213 respecto a la semana anterior

Críticas / altas1376▲ 145 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-9160	Aplazada	Media (4.3)	0.28%	—	Arma Digital Media INC Website Template^AI	11/9/2026	11/9/2026	Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-9161	Aplazada	Media (5.3)	0.33%	—	Dernekplus Website Template^AI	10/9/2026	10/9/2026	Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-8308	Aplazada	Media (6.1)	0.25%	—	Polen Media Software AND Information Services Website Template^AI	24/7/2026	24/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Polen Media Software and Information Services Website Template allows Reflected XSS. This issue affects Website Template: before v2.
CVE-2024-9149	Aplazada	Alta (8.6)	0.31%	—	Wind Media E-commerce Website Template^AI	4/3/2025	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5.
CVE-2024-3370	Aplazada	Alta (8.8)	0.32%	—	Egebilgi Website Template^AI	18/11/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egebilgi Software Website Template allows SQL Injection. This issue affects Website Template: before 29.04.2024.
CVE-2024-3373	Aplazada	Crítica (9.2)	0.39%	—	RSM Design Website Template^AI	27/9/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2.