Media
CVE-2026-14231
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Baja
CVE-2026-16954
AI Engine <= 3.6.3 - Authenticated (Editor+) Information Exposure
Media
CVE-2026-15153
WP Hotel Booking < 2.3.2 - Authenticated (Custom role+) SQL Injection
Media
CVE-2026-14240
Tourmaster <= 5.4.8 - Unauthenticated Information Exposure
Media
CVE-2026-18050
Events Manager <= 7.3 - Unauthenticated Pending Upload Disclosure
Media
CVE-2026-14226
Easy Appointments < 3.12.28 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-16092
Improved Save Button <= 1.2.1 - Authenticated (Author+) Second-Order SQL Injection via 'meta_key' Parameter
Alta
CVE-2026-15360
Ajax Load More <= 8.0.0 - Unauthenticated SQL Injection
Media
CVE-2026-66696
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor <= 3.7.8 - Authenticated (Contributor+) Information Exposure
Media
CVE-2026-17515
MLS Import <= 7.0.3 - Authenticated (Subscriber+) Information Exposure
Alta
76fb0ffd-32c1-483d-ae95-9bc70ba1c064
Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter
Media
CVE-2026-11973
WP-Lister Lite for eBay <= 3.8.8 - Authenticated (Shop Manager+) SQL Injection via 'orderby' Parameter
Media
CVE-2026-15344
WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter
Media
CVE-2026-65523
Formidable Forms Signature Online Contract Automation <= 2.0.1 - Unauthenticated Insecure Direct Object Reference
Alta
CVE-2026-65546
Qode Tours <= 3.1.3.1 - Unauthenticated SQL Injection
Media
CVE-2026-65547
Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-65520
WP OAuth Server ( Login with WordPress ) <= 6.2.0 - Unauthenticated SQL Injection
Media
CVE-2026-65543
Vimeo <= 1.2.2 - Authenticated (Subscriber+) Information Exposure
Alta
CVE-2026-65508
Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection
Media
CVE-2026-15444
Tutor LMS <= 4.0.1 - Authenticated (Administrator+) SQL Injection via 'coupon_code' Parameter
Alta
CVE-2026-10207
PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
Alta
CVE-2026-14785
Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection
Media
CVE-2026-15304
Plugin Organizer <= 10.2.4 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-15267
Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.