Vulnerabilidades explotables hoy
16,219en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,556
- Alto21,532
- Medio19,934
- Bajo2,099
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-664816.8 MED24.3%
——7Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.14dCVE-2026-664805.3 MED9.4%
——3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data.
This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.14dCVE-2026-654597.5 ALT19.8%
——6Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.14dCVE-2026-621307.2 ALT21.5%
——6Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.14dCVE-2026-621299.9 CRÍ17.4%
——5Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.14dCVE-2026-621259.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.14dCVE-2026-621249.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.14dCVE-2026-621239.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.14dCVE-2026-621209.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.14dCVE-2026-621187.3 ALT12.3%
——4Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.14dCVE-2026-621178.5 ALT19.0%
——6Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.14dCVE-2026-621167.1 ALT6.9%
——2Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.14dCVE-2026-621158.1 ALT19.6%
——6Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.14dCVE-2026-621007.1 ALT6.9%
——2Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.14dCVE-2026-620998.1 ALT19.6%
——6Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.14dCVE-2026-620986.5 MED9.6%
——3Unauthenticated Content Injection in Boutique <= 2.3.3 versions.14dCVE-2026-620968.1 ALT19.6%
——6Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.14dCVE-2026-620957.1 ALT6.9%
——2Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.14dCVE-2026-620948.1 ALT19.6%
——6Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.14dCVE-2026-620937.1 ALT7.5%
——2Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.14dCVE-2026-620928.1 ALT19.6%
——6Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.14dCVE-2026-620917.1 ALT6.9%
——2Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.14dCVE-2026-620909.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.14dCVE-2026-620879.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.14dCVE-2026-620869.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in Juno <= 2.25 versions.14dCVE-2026-620827.1 ALT7.5%
——2Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.14dCVE-2026-620779.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.14dCVE-2026-620769.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.14dCVE-2026-620758.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.14dCVE-2026-620748.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.14dCVE-2026-620708.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.14dCVE-2026-620698.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.14dCVE-2026-620688.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.14dCVE-2026-620678.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.14dCVE-2026-620668.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Volos <= 1.2 versions.14dCVE-2026-620658.1 ALT27.0%
——8Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.14dCVE-2026-620647.1 ALT6.9%
——2Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.14dCVE-2026-620549.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.14dCVE-2026-620539.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.14dCVE-2026-620529.8 CRÍ31.2%
——9Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.14d