Media
CVE-2025-14149
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2025-14040
Automotive Car Dealership Business WordPress Theme <= 13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action Fields
Crítica
CVE-2025-12981
Listee <= 1.1.6 - Unauthenticated Privilege Escalation
Media
CVE-2026-1558
WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter
Alta
CVE-2026-2428
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification
Alta
CVE-2026-1565
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2026-28126
RH Frontend Publishing Pro < 4.3.4 - Reflected Cross-Site Scripting
Media
e5b98a2c-faed-4e2b-8b94-31e2be95ad40
WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.4 - Unauthenticated Reflected Cross-Site Scripting via 'title_tag' Parameter
Alta
CVE-2026-28123
Veil - Wedding & Photographer WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Media
CVE-2026-28113
Ultimate Learning Pro <= 3.9.1 - Reflected Cross-Site Scripting
Alta
CVE-2026-28121
Anderson <= 1.4.2 - Unauthenticated Local File Inclusion
Media
CVE-2026-32418
Meow Gallery <= 5.4.4 - Authenticated (Author+) SQL Injection
Media
CVE-2026-39694
Simply Schedule Appointments <= 1.6.11.0 - Missing Authorization
Alta
CVE-2026-28114
WooCommerce License Manager <= 7.0.6 - Authenticated (Shop Manager+) Arbitrary File Upload
Media
CVE-2026-28135
Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1052 - Missing Authorization
Media
CVE-2026-28103
Responsive Zoom In/Out Slider WordPress Plugin <= 5.4.5 - Reflected Cross-Site Scripting
Alta
CVE-2026-28119
Nirvana <= 2.6 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28120
Dr.Patterson <= 1.3.2 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28124
Notarius - Legal Advisor WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Media
CVE-2026-28104
Site Suggest <= 1.3.9 - Missing Authorization
Media
CVE-2026-28078
Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Editor+) Arbitrary File Download
Alta
CVE-2026-28125
Midi - Sound & Music WordPress Theme <= 1.14 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28134
JetEngine <= 3.7.2 - Authenticated (Contributor+) Remote Code Execution
Alta
CVE-2026-28107
Muzicon <= 1.9.0 - Unauthenticated Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.