Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3029▲ 460 respecto a la semana anterior

Críticas / altas1445▲ 228 respecto a la semana anterior

Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior

Sin puntuar (sin CVSS)365▲ 156 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-81784	Aplazada	Alta (8.1)	0.44%	—	Wise Chat^AI	10/9/2026	10/9/2026	Unauthenticated PHP Object Injection in Wise Chat <= 3.4 versions.
CVE-2026-66636	Aplazada	Media (6.5)	0.22%	—	Wise Chat^AI	18/8/2026	20/8/2026	Contributor Cross Site Scripting (XSS) in Wise Chat <= 3.4 versions.
CVE-2025-3774	Aplazada	Alta (7.2)	0.29%	—	Wise Chat^AI	17/6/2025	17/6/2026	The Wise Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header in all versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will…
CVE-2024-13613	Analizada	Alta (7.5)	0.47%	—	Kainex Wise Chat	17/5/2025	17/6/2026	The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file…
CVE-2023-32504	Modificada	Alta (8.8)	0.32%	—	Kaine Wise Chat	18/11/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Kainex Wise Chat.This issue affects Wise Chat: from n/a through 3.1.3.
CVE-2019-6780	Modificada	Media (6.1)	4.9%	—	Kaine Wise Chat	24/1/2019	17/6/2026	The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer.