Alta
CVE-2026-90986
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.528
Alta
CVE-2026-90887
WP Inventory Manager <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting
Baja
CVE-2026-100909
October CMS: Incomplete Scheme Validation in Image Resizer
Alta
CVE-2026-75983
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
Media
CVE-2026-15402
Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter
Media
CVE-2026-89141
AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter
Baja
CVE-2026-49400
October CMS: PHP Object Injection via Backend Widget Session Storage
Media
CVE-2026-15758
3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter
Baja
CVE-2026-46696
October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls
Media
CVE-2026-85657
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix' Parameter
Media
CVE-2026-85575
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter
Media
CVE-2026-81429
Export & Import WPBakery Page Builder <= 1.0.2 - Cross-Site Request Forgery
Alta
CVE-2026-76550
Import Export Lite <= 3.9.33 - Authenticated (Admin+) Remote Code Execution
Alta
CVE-2026-85530
GiveWP <= 4.16.8.0 - Unauthenticated Privilege Escalation
Media
CVE-2026-86444
LearnPress <= 4.4.6 - Reflected Cross-Site Scripting
Media
CVE-2026-84906
Eventin <= 4.1.23 - Unauthenticated Payment Bypass
Alta
CVE-2026-88793
YouTube Embed – YouTube Gallery, Vimeo Gallery – WordPress Plugin 10.0 - 10.3 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-86784
Visualizer <= 4.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-19857
Formidable Forms <= 6.34 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2026-86823
Newsletter <= 9.3.6 - Unauthenticated Open Redirect
Alta
CVE-2026-76552
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2026-85349
FluentBoards <= 2.0.14 - Authenticated (Subscriber+) Information Exposure
Alta
CVE-2026-74933
GenieWords 1.5.27 - 1.5.34 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-77702
Eventin <= 4.1.23 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.