Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2700▼ 69 respecto a la semana anterior

Críticas / altas1449▲ 307 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

12 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-25306	Aplazada	Alta (7.1)	0.18%	—	8theme Xstore Core^AI 8theme Et-core-plugin^AI	25/3/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through <= 5.6.4.
CVE-2026-25307	Aplazada	Media (6.5)	0.17%	—	8theme Xstore Core^AI	19/2/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through < 5.7.
CVE-2025-64190	Aplazada	Media (6.5)	0.16%	—	8theme Xstore Core^AI	30/12/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through < 5.6.
CVE-2025-64189	Aplazada	Alta (7.1)	0.22%	—	8theme Xstore Core^AI	18/12/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through < 5.6.
CVE-2024-33555	Modificada	Alta (8.8)	0.42%	—	8theme Xstore Core	9/6/2024	17/6/2026	Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.
CVE-2024-33557	Analizada	Alta (8.8)	0.56%	—	8theme Xstore Core	4/6/2024	17/6/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8.
CVE-2024-33552	Analizada	Crítica (9.8)	0.57%	—	8theme Xstore Core	17/5/2024	17/6/2026	Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affects XStore Core: from n/a through 5.3.8.
CVE-2024-33556	Analizada	Crítica (9.8)	0.58%	—	8theme Xstore Core	17/5/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.
CVE-2024-33558	Modificada	Media (6.5)	0.43%	—	8theme Xstore Core	29/4/2024	17/6/2026	Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
CVE-2024-33553	Modificada	Crítica (9.8)	0.58%	—	8theme Xstore Core	29/4/2024	17/6/2026	Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
CVE-2024-33554	Modificada	Media (6.1)	0.42%	—	8theme Xstore Core	29/4/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core allows Reflected XSS.This issue affects XStore Core: from n/a through 5.3.5.
CVE-2024-33551	Modificada	Crítica (9.8)	0.61%	—	8theme Xstore Core	29/4/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5.