Media
CVE-2026-24376
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2026-25438
Gutenberg Blocks – Unlimited blocks For Gutenberg <= 1.2.8 - Reflected Cross-Site Scripting
Alta
CVE-2026-25435
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-1217
Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite
Media
CVE-2026-3512
Writeprint Stylometry <= 0.1 - Reflected Cross-Site Scripting via 'p' Parameter
Media
CVE-2026-1780
[CR]Paid Link Manager <= 0.5 - Reflected Cross-Site Scripting
Media
CVE-2026-1926
Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation
Media
CVE-2026-4268
WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings
Media
CVE-2026-25009
Education Zone <= 1.3.8 - Missing Authorization
Alta
CVE-2026-25457
Mixtape <= 2.1 - Unauthenticated Local File Inclusion
Media
CVE-2026-25456
Automated FedEx live/manual rates with shipping labels – HPOS supported <= 5.1.8 - Missing Authorization
Media
CVE-2026-40742
Nelio AB Testing <= 8.2.8 - Unauthenticated Information Exposure
Alta
CVE-2026-2992
KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard
Alta
CVE-2026-25449
Travel Booking WordPress Theme < 3.2.8.1 - Unauthenticated PHP Object Injection
Alta
CVE-2026-24378
EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.0 - Unauthenticated PHP Object Injection
Alta
CVE-2026-25452
Remoji – Post/Comment Reaction and Enhancement <= 2.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-25465
CP Multi View Events Calendar <= 1.4.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-25460
Ave Core <= 2.9.1 - Missing Authorization
Media
CVE-2026-24987
Activity Log for WordPress <= 1.2.7 - Missing Authorization
Media
CVE-2026-25455
Product Slider, Product Grid, Product Masonry <= 1.13.61 - Missing Authorization
Alta
CVE-2026-2991
KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token
Media
CVE-2026-24983
UpSolution Core <= 8.41 - Reflected Cross-Site Scripting
Media
CVE-2026-25462
avalex – Automatisch sichere Rechtstexte <= 3.1.3 - Missing Authorization
Media
CVE-2026-25309
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.10.1 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.