Media
CVE-2026-57636
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2026-13402
Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure
Media
CVE-2026-13331
Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter
Media
CVE-2026-57663
Recipe Cards For Your Food Blog from Zip Recipes <= 8.2.7 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-57662
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.0 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-57667
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5 - Authenticated (Sales representative+) SQL Injection
Media
CVE-2026-13226
Groundhogg <= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameter
Media
CVE-2026-56060
Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 - Unauthenticated Information Exposure
Media
CVE-2026-57619
Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Media
CVE-2026-56064
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-56062
Quotes llama <= 3.1.5 - Unauthenticated SQL Injection
Media
CVE-2026-12395
Job Portal <= 2.5.4 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-56067
JetSmartFilters <= 3.8.3 - Unauthenticated SQL Injection
Media
CVE-2026-7842
Infility Global < 2.15.20 - Authenticated (Editor+) SQL Injection
Alta
CVE-2026-56070
Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection
Crítica
CVE-2026-57700
OMGF Pro <= 5.2.6 - Unauthenticated Arbitrary File Upload via @import URL Reflection
Media
CVE-2026-8163
Infility Global < 2.15.19 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-56068
JetEngine <= 3.8.10.2 - Unauthenticated SQL Injection
Media
CVE-2026-12906
RTMKit Addons for Elementor <= 2.0.8 - Authenticated (Contributor+) Information Exposure
Alta
CVE-2026-12937
Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter
Media
CVE-2026-2508
Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id'
Alta
CVE-2026-12077
Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
Media
CVE-2026-12079
Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
Alta
CVE-2026-12512
Quotes Llama <= 3.1.5 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.