Alta
CVE-2026-56045
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2026-12906
RTMKit Addons for Elementor <= 2.0.8 - Authenticated (Contributor+) Information Exposure
Alta
CVE-2026-12937
Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter
Media
CVE-2026-2508
Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id'
Alta
CVE-2026-12077
Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
Media
CVE-2026-12079
Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
Media
CVE-2026-10833
Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute
Alta
CVE-2026-56043
Customer Reviews for WooCommerce <= 5.110.1 - Unauthenticated Stored Cross-Site Scripting
Crítica
CVE-2026-12281
Shibboleth <= 2.5.3 - Unauthenticated Administrator Account Creation
Media
CVE-2026-56042
Advanced Order Export For WooCommerce <= 4.0.9 - Authenticated (Customer+) Stored Cross-Site Scripting
Alta
CVE-2026-56041
Responsive Lightbox & Gallery <= 2.7.6 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-12512
Quotes Llama <= 3.1.5 - Unauthenticated SQL Injection
Alta
CVE-2026-56040
Gutenverse Form – Contact Form Builder, Block Form & Booking Form <= 2.4.7 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-56046
ListingPro - WordPress Directory & Listing Theme <= 2.9.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-56052
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.5 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2026-56071
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.53.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-11579
Kali Forms <= 2.4.16 - Missing Authorization to Unauthenticated Media File Upload
Alta
CVE-2026-56038
Frisbii Pay <= 1.8.2 - Authenticated (Contributor+) Privilege Escalation
Media
CVE-2026-56039
Quick Interest Slider <= 3.1.6 - Reflected Cross-Site Scripting
Media
CVE-2026-11580
Kali Forms <= 2.4.16 - Authenticated (Contributor+) Insecure Direct Object Reference to Post Metadata Disclosure
Media
CVE-2026-11370
WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter
Alta
CVE-2026-9643
WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging
Media
CVE-2026-9620
WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute
Alta
CVE-2026-4297
Welcome Software Publishing <= 0.0.31 - Authenticated (Subscriber+) Arbitrary Options Update to Privilege Escalation via 'nc.setOption' XML-RPC Method
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.