Media
CVE-2026-3330
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2026-4666
wpForo Forum <= 2.4.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Forum Post Modification via 'guestposting' Parameter
Media
CVE-2026-3488
WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and Privacy Audit Manipulation
Media
CVE-2026-4817
MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters
Media
CVE-2026-39540
Shipment Tracker for Woocommerce <= 1.5.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2026-3489
DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages'
Media
CVE-2026-3773
Accessibility Suite by Ability, Inc <= 4.20 - Authenticated (Subscriber+) SQL Injection via 'scan_id' Parameter
Alta
CVE-2026-3599
Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data
Media
CVE-2025-63029
WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.7.2 - Authenticated (Store vendor+) SQL Injection
Media
CVE-2026-40784
FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration <= 1.91.2 - Authenticated (Board Member+) Insecure Direct Object Reference
Media
CVE-2026-4011
Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Media
CVE-2026-1541
Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Sensitive Information Exposure via Insecure Direct Object Reference
Alta
CVE-2026-4352
JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter
Alta
CVE-2026-39531
WP Directory Kit <= 1.5.0 - Unauthenticated SQL Injection
Alta
CVE-2026-39530
SpeakOut! Email Petitions <= 4.6.5 - Unauthenticated SQL Injection
Alta
CVE-2026-39512
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.152 - Unauthenticated SQL Injection
Alta
CVE-2026-39511
WP Photo Album Plus <= 9.1.08.001 - Unauthenticated SQL Injection
Media
CVE-2026-5335
Magic Export & Import <= 1.1.0 - Unauthenticated Information Exposure
Alta
CVE-2026-39494
Product Filter for WooCommerce by WBW <= 3.1.2 - Unauthenticated SQL Injection
Alta
CVE-2026-5809
wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter
Media
CVE-2026-5207
LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter
Alta
CVE-2023-54359
Travel & Tours Meta Search <= 2.3 - Unauthenticated SQL Injection
Media
CVE-2026-5357
Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Media
CVE-2026-45215
EasyPay <= 4.3.0 - Unauthenticated Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.