Media
CVE-2026-86816
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2026-39771
BuddyBoss Platform <= 3.1.0 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-32581
Mooberry Book Manager 4.16.2 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-94663
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-32580
WooCommerce Lottery <= 2.2.9 - Unauthenticated SQL Injection
Alta
CVE-2026-32557
WooCommerce Appointments <= 5.3.2 - Unauthenticated SQL Injection
Media
CVE-2026-103066
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-103352
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Unauthenticated SQL Injection
Media
CVE-2026-97309
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1226 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-103334
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.24 - Unauthenticated Information Exposure
Alta
CVE-2026-96330
tagDiv Opt-In Builder <= 1.7.6 - Unauthenticated SQL Injection
Alta
CVE-2026-96809
EduAdmin Booking < 6.0.0 - Unauthenticated SQL Injection
Media
CVE-2026-86786
Slider Pro <= 1.0.0 - Unauthenticated Information Exposure
Media
CVE-2026-103337
SmartyParcel – Shipping Automation & Order Tracking for GLS, InPost, Nova Post and more <= 1.23.2 - Missing Authorization
Alta
CVE-2026-96331
Ajax Search Pro <= 4.29.1 - Unauthenticated SQL Injection
Media
CVE-2026-96329
tagDiv Opt-In Builder <= 1.7.6 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-96328
JNews - Pay Writer <= 12.0.1 - Unauthenticated SQL Injection
Media
CVE-2026-95599
Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 6.0.5 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-96267
WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter
Crítica
CVE-2026-87115
VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter
Alta
CVE-2026-18443
Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter
Alta
CVE-2026-96564
SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display Name
Alta
CVE-2026-97341
Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header
Media
CVE-2026-100149
WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signature Domain-Separation Flaw in `/yamidoo/v1/customer`…
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.