Media
CVE-2026-9060
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Alta
CVE-2026-6381
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.3 - Authenticated (Subscriber+) Local File Inclusion
Alta
CVE-2026-6495
Ajax Load More – Infinite Scroll, Load More, & Lazy Load < 7.8.4 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-10077
YOOtheme Pro <= 5.0.34 - Authenticated (Author+) Stored Cross-Site Scripting
Crítica
CVE-2026-10795
UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 (free) < 2.26.5 (premium) - Unauthenticated Authentication Bypass via UpdraftCentral udrpc
Media
CVE-2026-2827
Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'
Media
CVE-2026-52695
ABC Crypto Checkout <= 1.8.2 - Unauthenticated Information Exposure
Media
CVE-2026-10750
Royal MCP <= 1.4.25 - Missing Authorization to Unauthenticated MCP Tool Use
Media
CVE-2026-52699
VikRentCar Car Rental Management System <= 1.4.5 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-52700
WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce <= 3.0.2 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-52696
JetBlog <= 2.4.8 - Unauthenticated Information Exposure
Media
CVE-2026-52694
Digital Signature Add-on for WooCommerce <= 2.0 - Unauthenticated Information Exposure
Media
CVE-2026-52698
PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget <= 4.2.3 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-52697
Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.7 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-11568
Product Configurator for WooCommerce <= 1.7.2 - Unauthenticated Private/Draft Product Data Disclosure
Media
CVE-2026-11883
WebAuthn Provider for Two Factor <= 2.5.5 - Two-Factor Authentication Bypass
Alta
CVE-2026-11570
User Submitted Posts <= 20260607 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-60218
PT Luxa Addons <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2026-49043
WP Migrate Lite – Migration Made Easy <= 2.7.8 - Cross-Site Request Forgery
Alta
CVE-2026-11794
Advanced Form Integration <= 2.1.0 - Unauthenticated Privilege Escalation
Crítica
CVE-2025-6254
Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation
Alta
CVE-2026-3018
Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter
Media
CVE-2026-8613
aThemes Addons for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Widget Setting
Media
CVE-2026-8853
MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.