PULSE
EN
FEED
ransomhyflock reclama a Aesthetic Dental Designs, P.A · US · Healthcareransomqilin reclama a ECOM · CH · Retail & E-Commerceransomemperador reclama a AyT COMPUTERS SRL · Technologyransomqilin reclama a ETO · DE · Not Foundransomn0n reclama a TOPLIVO AD · BG · Energy & Utilitiesransomn0n reclama a Technoleads Services Inc. · Technologyransomn0n reclama a Pure Grow Diamonds Inc. · Manufacturingransomn0n reclama a Mach Law APC (San Diego family law and divorce practice) · US · Professional Servicesransomn0n reclama a Keidel Supply Company Incorporated · US · Manufacturingransomn0n reclama a Andrews Advisory Group LLC · US · Professional Servicesransomemperador reclama a AB InBev · BE · Agriculture and Food Productionransomwhitearmor reclama a Hisense · CN · Technologyransomanubis reclama a Newcomer Cremations, Funerals & Receptions · US · Healthcareransomqilin reclama a Castle Howard Estate · GB · Hospitalityransomhyflock reclama a Aesthetic Dental Designs, P.A · US · Healthcareransomqilin reclama a ECOM · CH · Retail & E-Commerceransomemperador reclama a AyT COMPUTERS SRL · Technologyransomqilin reclama a ETO · DE · Not Foundransomn0n reclama a TOPLIVO AD · BG · Energy & Utilitiesransomn0n reclama a Technoleads Services Inc. · Technologyransomn0n reclama a Pure Grow Diamonds Inc. · Manufacturingransomn0n reclama a Mach Law APC (San Diego family law and divorce practice) · US · Professional Servicesransomn0n reclama a Keidel Supply Company Incorporated · US · Manufacturingransomn0n reclama a Andrews Advisory Group LLC · US · Professional Servicesransomemperador reclama a AB InBev · BE · Agriculture and Food Productionransomwhitearmor reclama a Hisense · CN · Technologyransomanubis reclama a Newcomer Cremations, Funerals & Receptions · US · Healthcareransomqilin reclama a Castle Howard Estate · GB · Hospitality
CVE Watch402,574 en archivo total

Vulnerabilidades explotables hoy

15,694en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689

Distribución · última ventana

  • Crítico
    4,544
  • Alto
    18,442
  • Medio
    17,034
  • Bajo
    1,708
Filtros
Filtros

Ventana

Severidad

Filtros

Vulnerabilidades14,041–14,080 · 15,694
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-972385.5 MED
5.6%
——2Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.25dCVE-2026-972377.1 ALT
6.9%
——2Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.25dCVE-2026-972366.5 MED
10.4%
——3Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.25dCVE-2026-972357.1 ALT
6.9%
——2Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.25dCVE-2026-971977.5 ALT
21.0%
——6Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.25dCVE-2026-970794.3 MED
19.5%
——6Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.25dCVE-2026-970785.3 MED
12.6%
——4Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.25dCVE-2026-970777.1 ALT
9.1%
——3Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.25dCVE-2026-970744.3 MED
15.7%
——5Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.25dCVE-2026-970676.5 MED
6.8%
——2Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.25dCVE-2026-970665.3 MED
13.0%
——4Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.25dCVE-2026-970657.1 ALT
6.9%
——2Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.25dCVE-2026-968388.8 ALT
3.2%
——1Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.25dCVE-2026-968378.8 ALT
44.2%
——13Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.25dCVE-2026-968367.1 ALT
9.1%
——3Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.25dCVE-2026-968356.5 MED
4.7%
——1Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.25dCVE-2026-968346.5 MED
24.8%
——7Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.25dCVE-2026-968337.2 ALT
32.6%
——10Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.25dCVE-2026-968327.2 ALT
29.4%
——9Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.25dCVE-2026-968318.8 ALT
27.7%
——8Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.25dCVE-2026-968307.1 ALT
9.1%
——3Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.25dCVE-2026-968296.5 MED
6.8%
——2Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.25dCVE-2026-968287.6 ALT
19.1%
——6Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.25dCVE-2026-968277.6 ALT
19.1%
——6Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.25dCVE-2026-968254.2 MED
9.0%
——3Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.25dCVE-2026-968246.8 MED
31.5%
——9Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.25dCVE-2026-968237.5 ALT
24.1%
——7Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.25dCVE-2026-968229.3 CRÍ
20.6%
——6Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.25dCVE-2026-968216.3 MED
15.2%
——5Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.25dCVE-2026-968207.1 ALT
13.7%
——4Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.25dCVE-2026-968197.1 ALT
13.7%
——4Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.25dCVE-2026-968187.5 ALT
15.6%
——5Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.25dCVE-2026-968178.2 ALT
30.1%
——9Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.25dCVE-2026-968167.1 ALT
6.9%
——2Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.25dCVE-2026-968157.2 ALT
23.3%
——7Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.25dCVE-2026-968147.1 ALT
6.9%
——2Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.25dCVE-2026-964505.4 MED
4.8%
——1Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.25dCVE-2026-963527.1 ALT
6.9%
——2Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.25dCVE-2026-963517.1 ALT
6.9%
——2Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.25dCVE-2026-963509.8 CRÍ
37.7%
——11Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.25d