Media
CVE-2026-55468
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 33
Restablecer filtros
Media
ghsa-jm5p-837g-rv8g
Wagtail: Improper restriction handling on Page translation API endpoint
Media
ghsa-x5cx-w6p2-mxf2
Wagtail: Improper permission handling when copying snippets
Media
ghsa-c2xx-cjmh-9q8f
Wagtail: Improper restriction handling on descendant collections in Documents and Images API
Baja
ghsa-92hv-j533-69wc
Wagtail: Identification of documents by SHA1 hash
Media
CVE-2026-25517
Wagtail has improper permission handling on admin preview endpoints
Media
CVE-2024-35228
Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
Baja
CVE-2024-32882
Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`
Media
CVE-2026-54262
Wagtail: Pages translations can be created without page permissions when using simple_translation
Media
CVE-2026-54260
Wagtail: Denial of service via unbounded filter specs in the image preview
Media
CVE-2026-54261
Wagtail: Improper permission handling in image preview
Media
CVE-2026-54259
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
Alta
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
Media
CVE-2026-44201
Wagtail has improper restriction handling on Documents and Images API
Media
CVE-2026-44200
Wagtail has improper permission handling when copying pages
Media
CVE-2026-44199
Wagtail has improper permission handling when deleting form submissions
Media
CVE-2026-44198
Wagtail has improper permission handling when viewing page history
Media
CVE-2026-44197
Wagtail has improper permission handling when comparing revisions
Media
CVE-2026-28223
Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface
Media
CVE-2026-28222
Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes
Alta
CVE-2024-39317
Wagtail regular expression denial-of-service via search query parsing
Media
CVE-2021-46897
views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.
Baja
CVE-2023-45809
Wagtail vulnerable to disclosure of user names via admin bulk action views
Alta
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.