Media
CVE-2026-66631
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.504
Media
CVE-2026-66630
Issues and Series for Newspapers, Magazines, Publishers, Writers <= 3.1.3 - Authenticated (Administrator+) SQL Injection
Media
CVE-2026-16750
Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
Alta
CVE-2026-86814
UsersWP - Social Login <= 1.5.9 - Unauthenticated Privilege Escalation
Media
CVE-2026-86591
Botiga Pro <= 1.6.4 - Missing Authorization
Media
CVE-2026-92430
Rede Itaú for WooCommerce <= 5.4.6 - Missing Authorization
Media
CVE-2026-92421
Hydra Booking <= 1.2.2 - Authenticated (Hydra Host+) Insecure Direct Object Reference
Media
CVE-2026-78296
FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login <= 2.1.2 - Unauthenticated Email Verification Bypass
Baja
dc1ae2c7-1eff-4976-8f88-f0b97a5cf323
WordPress Core <= 7.1 - Authenticated (Administrator+) Missing Authorization to Network Plugin Activation (Multisite)
Media
CVE-2025-15698
Business Name Generator <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Baja
c41aadb1-e1a6-4bda-ac94-c461c320e78f
WordPress Core <= 7.1 - HTML API set_modifiable_text() Comment Boundary Break
Media
c34ef5e3-afcd-4686-861f-5e382812233a
WordPress Core <= 7.1 - Forced Theme Install/Preview and Selector Injection via Theme Installer Route
Media
CVE-2026-89278
GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script
Media
CVE-2026-87829
Checkout Field Manager <= 7.9.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
b54af5b0-d79a-4fb2-965f-d3ff4956dc5a
WordPress Core <= 7.1 - Authenticated (Author+) Information Exposure via attachment_submitbox_metadata()
Media
CVE-2026-84909
Custom Twitter Feeds <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute
Media
CVE-2026-92400
Payment Gateway for PayPal on WooCommerce <= 9.2.0 - Unauthenticated Payment Bypass
Media
CVE-2026-12106
Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery via 'src' Attribute of <img> Tags
Media
adc90b32-f973-4c8e-b419-0614d4642b7f
WordPress Core <= 7.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Post Overwrite
Media
CVE-2026-85574
Unbounce Landing Pages <= 1.1.4 - Missing Authorization
Alta
CVE-2026-93031
WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
Media
CVE-2026-91847
Bookly <= 28.1 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-92420
Hydra Booking <= 1.2.1 - Authenticated (Hydra Host+) Insecure Direct Object Reference
Media
8b8d4431-ac72-45a2-b4a1-19690946d0ee
WordPress Core <= 7.1 - Authenticated (Author+) Missing Authorization to Comment/Note Reparenting via REST API
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.