Media
CVE-2026-34892
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2026-49056
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.4 - Unauthenticated Information Exposure
Alta
CVE-2026-48966
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-48867
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-48965
Backup, Restore and Migrate your sites with XCloner <= 4.8.6 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-48967
Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-9732
EmergencyWP <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2026-7421
Passeum Ticketing <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'shop_name' Setting
Crítica
CVE-2026-5076
ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation
Media
CVE-2026-5074
ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter
Alta
CVE-2026-5073
ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter
Alta
CVE-2026-1829
Content Visibility for Divi Builder <= 4.02 - Authenticated (Contributor+) Remote Code Execution
Media
CVE-2026-48873
Montonio for WooCommerce <= 10.1.2 - Missing Authorization
Media
CVE-2026-48868
Simple Shopping Cart <= 5.2.9 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-48874
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.8.7 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-48889
Booking for Appointments and Events Calendar – Amelia <= 2.3 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2026-27351
Employee, Leave and Recruitment Management System – Crew HRM <= 1.2.2 - Missing Authorization
Alta
CVE-2026-48885
HollerBox — Fast & Effective Popups & Lead-Generation <= 2.3.10.1 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-48875
JetSmartFilters <= 3.8.1 - Unauthenticated SQL Injection
Media
CVE-2026-48881
TrueBooker – Appointment Booking and Scheduler System <= 1.1.9 - Missing Authorization
Media
CVE-2026-48878
Visual Link Preview <= 2.4.1 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-5336
Dataverse Integration <= 2.90 - Authenticated (Contributor+) Server-Side Template Injection to Information Exposure
Media
CVE-2026-49782
Elementor Website Builder – more than just a page builder <= 4.1.0 - Missing Authorization
Media
CVE-2026-48964
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 - Authenticated (Subscriber+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.