Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3042▲ 436 respecto a la semana anterior

Críticas / altas1431▲ 190 respecto a la semana anterior

Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior

Sin puntuar (sin CVSS)383▲ 168 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-77820	Aplazada	Media (6.4)	0.33%	—	Liquidweb Wpcomplete^AI	19/9/2026	21/9/2026	The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all versions up to, and including, 2.9.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to…
CVE-2026-66599	Aplazada	Alta (7.1)	0.25%	—	Liquidweb Wpcomplete^AI	24/8/2026	24/8/2026	Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.
CVE-2026-57661	Aplazada	Media (5.4)	0.29%	—	Liquidweb Wpcomplete^AI	26/6/2026	26/6/2026	Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.
CVE-2026-42750	Aplazada	Media (6.5)	0.22%	—	Liquidweb Wpcomplete^AI	27/5/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.4.
CVE-2025-49906	Aplazada	Media (5.3)	0.34%	—	Stellarwp Wpcomplete^AI	22/10/2025	30/9/2026	Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through <= 2.9.5.3.
CVE-2025-58974	Aplazada	Media (6.5)	0.21%	—	Stellarwp Wpcomplete^AI	22/9/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.2.
CVE-2025-50046	Aplazada	Media (6.5)	0.23%	—	Stellarwp Wpcomplete^AI	20/6/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.
CVE-2022-45825	Modificada	Media (6.1)	0.52%	—	Liquidweb Wpcomplete	28/3/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin <= 2.9.2 versions.