Archivo de vulnerabilidades

Conoce las vulnerabilidades. Protege tus aplicaciones.

Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.

Plataforma

Gravedad

Publicada desde

Publicada hasta

Archivo de vulnerabilidades 35

Restablecer filtros

Alta 09.10.2026

CVE-2026-96278

WP Photo Album Plus <= 9.3.03.002 - Cross-Site Scripting almacenado no autenticado mediante el historial de sesión de REQUEST_URI

Una vulnerabilidad de Cross-Site Scripting almacenado en el plugin WP Photo Album Plus para WordPress permite a atacantes no autenticados inyectar scripts web arbitrarios a través del historial de sesión de REQUEST_URI.

Media 30.09.2026

CVE-2026-102386

WP Photo Album Plus <= 9.3.02.003 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Alta 23.09.2026

CVE-2026-93774

WP Photo Album Plus <= 9.3.02.002 - Unauthenticated Stored Cross-Site Scripting

Alta 18.09.2026

CVE-2026-87909

WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection

Alta 10.09.2026

CVE-2026-18579

WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting

Media 14.08.2026

CVE-2026-18049

WP Photo Album Plus < 9.2.07.002 - Missing Authorization

Media 13.08.2026

CVE-2026-14922

WP Photo Album Plus < 9.2.04.003 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Crítica 10.08.2026

CVE-2026-18048

Photo Album Plus <= 9.2.07.1 - Arbitrary File Deletion to Unauthenticated Arbitrary ZIP File Deletion

Media 10.08.2026

CVE-2026-18962

Photo Album Plus <= 9.2.09.1 - Missing Authorization

Media 10.08.2026

CVE-2026-17013

Photo Album Plus <= 9.2.07.1 - Reflected Cross-Site Scripting

Media 03.08.2026

CVE-2026-17014

Photo Album Plus <= 9.2.07.1 - Unauthenticated Export ZIP File Deletion

Media 28.07.2026

CVE-2026-15344

WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter

Media 30.06.2026

CVE-2026-10095

WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute

Alta 30.06.2026

CVE-2026-57675

WP Photo Album Plus <= 9.2.02.004 - Unauthenticated Stored Cross-Site Scripting

Alta 17.06.2026

CVE-2026-54829

WP Photo Album Plus <= 9.1.13.005 - Unauthenticated SQL Injection

Alta 11.06.2026

CVE-2026-6379

WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection

Alta 13.04.2026

CVE-2026-39511

WP Photo Album Plus <= 9.1.08.001 - Unauthenticated SQL Injection

Alta 06.01.2026

CVE-2025-14835

WP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site Scripting

Media 03.10.2025

CVE-2025-8726

WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload

Alta 10.11.2024

CVE-2024-10958

WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay

Media 16.10.2024

CVE-2024-9951

Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting

Media 11.07.2024

CVE-2024-38713

WP Photo Album Plus <= 8.8.02.002 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Media 28.06.2024

CVE-2024-37416

WP Photo Album Plus <= 8.8.00.002 - Reflected Cross-Site Scripting

Media 23.05.2024

CVE-2024-4037

WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution

Mostrando 1 a 24 de 35 resultados

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación

Conoce las vulnerabilidades. Protege tus aplicaciones.

Archivo de vulnerabilidades 35

Identifica las vulnerabilidades de tu aplicación

La seguridad de tus aplicaciones en tu correo