Alta
CVE-2026-73624
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.515
Alta
CVE-2026-73623
GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks
Media
CVE-2026-73621
GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count
Alta
CVE-2026-73620
GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read
Alta
CVE-2026-73622
GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)
Alta
CVE-2026-73625
GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution
Media
CVE-2026-73619
GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()
Media
CVE-2026-28182
AcyMailing SMTP Newsletter <= 10.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-13177
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Authenticated (Contributor+) Information Exposure
Crítica
CVE-2026-28192
Piotnet Addons For Elementor Pro <= 7.1.67 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-53345
Thim Core <= 2.3.3 - Authenticated (Subscriber+) Remote Code Execution
Alta
CVE-2026-28187
Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-28154
Samex - Clean, Minimal Shop WooCommerce WordPress <= 2.5 - Reflected Cross-Site Scripting
Crítica
CVE-2026-28185
Log in with Google <= 1.4.2 - Authentication Bypass
Media
CVE-2026-14230
ECS <= 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2026-28175
Visitors Traffic Real Time Statistics <= 8.11 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-73403
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.6 - Missing Authorization
Crítica
CVE-2026-61979
SAML Single Sign On – SSO Login <= 5.4.3 - Unauthenticated Privilege Escalation
Media
CVE-2026-14229
ECS <= 4.3.7 - Missing Authorization to Unauthenticated Private Content Disclosure
Media
CVE-2026-61984
WPMobile.App <= 11.77 - Missing Authorization
Alta
CVE-2026-61980
OMGF Pro <= 5.2.7 - Unauthenticated Arbitrary File Download
Media
CVE-2026-28155
Do Lasso <= 358 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-28173
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.19 - Authenticated (Customer+) Arbitrary Content Deletion
Media
CVE-2026-28157
Do Lasso <= 358 - Authenticated (Subscriber+) Path Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.