Alta
CVE-2026-19704
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 27
Restablecer filtros
Alta
CVE-2026-15032
wpDiscuz <= 7.6.59 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-9148
Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field
Media
CVE-2026-22209
Comments – wpDiscuz <= 7.6.46 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2025-68997
wpDiscuz <= 7.6.42 - Unauthenticated Insecure Direct Object Reference
Alta
CVE-2025-13820
Comments – wpDiscuz <= 7.6.39 - Unauthenticated Authentication Bypass Through Account Takeover
Media
CVE-2025-59591
wpDiscuz <= 7.6.33 - Missing Authorization
Crítica
CVE-2024-9488
Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider
Media
CVE-2024-6704
Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection
Media
CVE-2024-35681
Comments – wpDiscuz <= 7.6.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-2477
wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text
Media
CVE-2023-51691
wpDiscuz <= 7.6.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-47185
wpDiscuz <= 7.6.11 - Unauthenticated Stored Cross-Site Scripting via Comment Uploaded Image Filename
Media
CVE-2023-46310
wpDiscuz <= 7.6.10 - Unauthenticated Content Injection
Baja
CVE-2023-46311
wpDiscuz <= 7.6.3 - Authenticated(Author+) Insecure Direct Object Reference
Media
CVE-2023-46309
wpDiscuz <= 7.6.10 - Insufficient Authorization to Comment Submission on Deleted Posts
Media
CVE-2023-45760
wpDiscuz <= 7.6.3 - Missing Authorization via AJAX actions
Alta
9dd1e52c-83b7-4b3e-a791-a2c0ccd856bc
wpDiscuz <= 7.6.5 - Unauthenticated SQL Injection
Media
CVE-2023-3869
wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease
Media
CVE-2023-3998
wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease
Media
CVE-2022-43492
Comments – wpDiscuz <= 7.4.2 - Insecure Direct Object References
Baja
CVE-2022-23984
Comments - wpDiscuz <= 7.3.11 Sensitive Information Disclosure
Media
CVE-2021-24806
Comments - wpDiscuz <= 7.3.3 - Arbitrary Comment Addition/Edition/Deletion by Cross-Site Request Forgery
Media
CVE-2021-24737
Comments - wpDiscuz <= 7.3.0 - Authenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.