Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2022-47181

Publication date:
07/11/2023
Cross-Site Request Forgery (CSRF) vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cross Site Request Forgery.This issue affects Email Templates Customizer and Designer for WordPress and WooCommerce: from n/a through 1.4.2.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-38702

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Nakashima Masahiro WP CSV Exporter.This issue affects WP CSV Exporter: from n/a through 2.0.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-41616

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This issue affects Export Users Data CSV: from n/a through 2.1.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-42882

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Shambix Simple CSV/XLS Exporter.This issue affects Simple CSV/XLS Exporter: from n/a through 1.5.8.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2023-0898

Publication date:
07/11/2023
<br /> General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.<br /> <br /> <br /> <br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2023

CVE-2022-46809

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating &amp; Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating &amp; Reviews for WooCommerce: from n/a through 1.6.7.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-46821

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Jackmail &amp; Sarbacane Emails &amp; Newsletters with Jackmail.This issue affects Emails &amp; Newsletters with Jackmail: from n/a through 1.2.22.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-45348

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-45360

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter Emails.This issue affects Commenter Emails: from n/a through 2.6.1.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-45370

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import &amp; Export.This issue affects WordPress Comments Import &amp; Export: from n/a through 2.3.1.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-45810

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress &amp; WooCommerce.This issue affects Icegram Express – Email Marketing, Newsletters and Automation for WordPress &amp; WooCommerce: from n/a through 5.5.2.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2022-46801

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026