Alta
CVE-2026-9009
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2026-7533
Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter
Media
CVE-2026-9644
LiveSmart Video Chat <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-9228
Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function
Alta
CVE-2026-2374
Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via PHP_SELF
Media
CVE-2026-5737
Independent Analytics <= 2.14.9 - Unauthenticated Server-Side Request Forgery via Tracking Route
Alta
CVE-2026-7802
Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter
Media
CVE-2026-9241
FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
Media
CVE-2026-4888
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending
Media
CVE-2026-49053
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 3.9.6 - Missing Authorization
Alta
CVE-2025-69166
Gunslinger <= 1.7 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69161
Snowy <= 1.13 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69167
Eros <= 1.3 - Unauthenticated Local File Inclusion
Media
CVE-2026-8089
weMail <= 2.1.2 - Reflected Cross-Site Scripting
Alta
CVE-2025-69172
Resurs <= 1.3 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69177
Roneous - Creative Multi-Purpose WordPress Theme <= 2.1.5 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69173
Tipsy <= 1.1 - Unauthenticated Local File Inclusion
Media
CVE-2026-48971
Product Import Export for WooCommerce – Import Export Product CSV Suite <= 2.5.6 - Missing Authorization
Alta
CVE-2025-69176
ITactics <= 1.0 - Unauthenticated Local File Inclusion
Media
CVE-2026-8682
3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via settings REST endpoint
Media
CVE-2026-42736
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.14.16 - Unauthenticated Insecure Direct Object Reference
Alta
CVE-2025-69162
Grecko <= 5.17 - Unauthenticated Local File Inclusion
Media
CVE-2026-49047
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.4.29 - Missing Authorization
Media
CVE-2026-49051
WP Meta and Date Remover <= 2.3.6 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.