Media
CVE-2026-92996
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2026-96897
Optima Express 8.5.0 - 8.7.5 - Missing Authorization
Media
CVE-2026-96896
Malcure Malware Shield <= 19.9.6 - Missing Authorization
Alta
CVE-2026-88843
MasterStudy LMS 3.5.29 - 3.7.49 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-89001
WPeMatico RSS Feed Fetcher <= 2.8.26 - Authenticated (Contributor+) Privilege Escalation
Media
CVE-2026-96899
Optima Express 8.6.0 - 8.7.5 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2026-92436
Mailchimp for WooCommerce <= 6.2 - Unauthenticated Insecure Direct Object Reference
Alta
CVE-2026-96752
Zero Spam for WordPress <= 5.7.10 - Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration
Media
CVE-2026-93747
wpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile Field
Media
CVE-2026-88996
WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter
Alta
CVE-2026-93654
Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter
Media
CVE-2026-13179
WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter
Alta
CVE-2026-13456
WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter
Media
CVE-2026-12037
Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter
Alta
CVE-2026-95864
Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter
Media
CVE-2026-17602
SSL Zen <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_name' Parameter
Media
CVE-2026-17577
SSL Zen <= 4.7.42 - Reflected Cross-Site Scripting via 'uri' Parameter
Alta
CVE-2026-19804
s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return
Alta
CVE-2026-94573
Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value
Alta
CVE-2026-95866
User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field
Media
CVE-2026-93656
User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field
Alta
CVE-2026-93901
Optima Express IDX <= 8.7.5 - Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment
Alta
CVE-2026-96568
Restaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter
Alta
CVE-2026-89406
Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.