Archivo de vulnerabilidades

Conoce las vulnerabilidades. Protege tus aplicaciones.

Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.

Plataforma

Gravedad

Publicada desde

Publicada hasta

Archivo de vulnerabilidades 58

Restablecer filtros

Media 09.10.2026

CVE-2026-104728

AutomatorWP <= 5.8.4 - Falta de autorización que permite la divulgación de información confidencial

Una verificación de autorización faltante en AutomatorWP permite a atacantes autenticados con rol de suscriptor o superior enumerar registros de Fluent Forms, exponiendo IDs y títulos.

Media 09.10.2026

CVE-2026-15178

Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification

Media 09.10.2026

CVE-2026-101324

Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter

Media 05.10.2026

CVE-2026-94669

Fluent Forms Pro Add On Pack <= 6.2.13 - Missing Authorization

Alta 05.10.2026

CVE-2026-94675

Fluent Forms Pro Add On Pack <= 6.2.13 - Unauthenticated Stored Cross-Site Scripting

Media 01.10.2026

CVE-2026-103343

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

Media 01.10.2026

CVE-2026-103353

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Missing Authorization

Media 28.08.2026

CVE-2026-81297

Fluent Forms Pro Add On Pack <= 6.2.12 - Authenticated (Subscriber+) Privilege Escalation

Media 28.08.2026

CVE-2026-81296

Fluent Forms Pro Add On Pack <= 6.2.12 - Missing Authorization

Alta 18.08.2026

CVE-2026-66633

Fluent Forms Pro Add On Pack < 6.2.12 - Unauthenticated Stored Cross-Site Scripting

Alta 12.08.2026

CVE-2026-18146

Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values

Media 11.08.2026

CVE-2026-11578

Fluent Forms <= 6.2.4 - Insecure Direct Object Reference to Authenticated (Form Manager+) Cross-Form Submission Entry Deletion

Media 10.08.2026

CVE-2026-11880

Fluent Forms <= 6.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Subscription Cancellation

Crítica 03.08.2026

CVE-2026-73532

Fluent Forms Pro 6.2.7 & Ninja Tables Pro 5.2.13 - Remote Code Execution via Backdoor

Media 31.07.2026

CVE-2026-17571

Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'

Media 30.07.2026

CVE-2026-17567

Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter

Media 30.07.2026

CVE-2026-11881

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder < 6.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Alta 28.07.2026

CVE-2026-16655

Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member

Alta 25.07.2026

CVE-2026-15962

Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field

Media 09.07.2026

CVE-2026-5069

Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'

Alta 13.05.2026

CVE-2026-5395

Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter

Alta 13.05.2026

CVE-2026-5396

Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter

Media 12.05.2026

CVE-2026-6828

Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute

Media 05.05.2026

CVE-2026-6344

Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment

Mostrando 1 a 24 de 58 resultados

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación

Conoce las vulnerabilidades. Protege tus aplicaciones.

Archivo de vulnerabilidades 58

Identifica las vulnerabilidades de tu aplicación

La seguridad de tus aplicaciones en tu correo