Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2024-33918

Publication date:
03/05/2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maxim K AJAX Login and Registration modal popup + inline form allows Stored XSS.This issue affects AJAX Login and Registration modal popup + inline form: from n/a through 2.23.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-33924

Publication date:
03/05/2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Organic IDX plugin allows Reflected XSS.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-33926

Publication date:
03/05/2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Karl Kiesinger GWP-Histats allows Stored XSS.This issue affects GWP-Histats: from n/a through 1.0.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-33927

Publication date:
03/05/2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team GIPHY Giphypress allows Stored XSS.This issue affects Giphypress: from n/a through 1.6.2.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-33941

Publication date:
03/05/2024
Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.1.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-28072

Publication date:
03/05/2024
A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly. <br /> <br /> <br /> <br /> <br /> <br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
25/02/2025

CVE-2024-24710

Publication date:
03/05/2024
Missing Authorization vulnerability in SlickRemix Feed Them Social.This issue affects Feed Them Social: from n/a through 4.2.0.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-32810

Publication date:
03/05/2024
Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: from n/a through 1.0.2.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-32831

Publication date:
03/05/2024
Improper Neutralization of Input During Web Page Generation (&amp;#39;Cross-site Scripting&amp;#39;) vulnerability in Lorna Timbah (webgrrrl) Accessibility Widget allows Stored XSS.This issue affects Accessibility Widget: from n/a through 2.2.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2024-33916

Publication date:
03/05/2024
Improper Neutralization of Input During Web Page Generation (&amp;#39;Cross-site Scripting&amp;#39;) vulnerability in MachoThemes CPO Companion allows Stored XSS.This issue affects CPO Companion: from n/a through 1.1.0.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2023-44472

Publication date:
03/05/2024
Missing Authorization vulnerability in ThemeFuse Unyson.This issue affects Unyson: from n/a through 2.7.28.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026

CVE-2023-25457

Publication date:
03/05/2024
Missing Authorization vulnerability in Richteam Slider Carousel – Responsive Image Slider.This issue affects Slider Carousel – Responsive Image Slider: from n/a through 1.5.1.
Severity CVSS v4.0: Pending analysis
Last modification:
28/04/2026