Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2693▼ 77 respecto a la semana anterior

Críticas / altas1446▲ 303 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-1617	Modificada	Media (6.1)	0.27%	—	Usabilitydynamics Wp-invoice	16/1/2024	17/6/2026	The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacking sanitisation as well as escaping in some of them, allowing attacker to make a logged in admin change them and add XSS payload in them
CVE-2016-11011	Modificada	Media (6.5)	1.4%	—	Usabilitydynamics Wp-invoice	20/9/2019	17/6/2026	The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.
CVE-2016-11010	Modificada	Media (5.3)	1.8%	—	Usabilitydynamics Wp-invoice	20/9/2019	17/6/2026	The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
CVE-2016-11009	Modificada	Media (5.3)	1.8%	—	Usabilitydynamics Wp-invoice	20/9/2019	17/6/2026	The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
CVE-2016-11008	Modificada	Media (5.3)	1.8%	—	Usabilitydynamics Wp-invoice	20/9/2019	17/6/2026	The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.
CVE-2016-11007	Modificada	Media (5.3)	2.0%	—	Usabilitydynamics Wp-invoice	20/9/2019	17/6/2026	The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
CVE-2016-11006	Modificada	Media (5.3)	1.8%	—	Usabilitydynamics Wp-invoice	20/9/2019	17/6/2026	The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.