Media
CVE-2026-64662
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.504
Media
CVE-2026-64663
Statamic: Unsafe method invocation via Antlers template resolution allows data destruction
Alta
CVE-2026-64665
Statamic: Account takeover via OAuth email matching without email-verification check
Media
CVE-2026-64664
Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence
Media
CVE-2026-71433
LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
Media
CVE-2026-11907
Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via Heartbeat API
Crítica
CVE-2026-14364
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'
Crítica
CVE-2026-14365
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'
Media
CVE-2026-12801
Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes
Sin evaluar
CVE-2026-64640
Apache Polaris did not consistently validate storage locations supplied during table and view registration.
Media
CVE-2026-18501
UsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable Substitution
Media
CVE-2026-0673
Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
Alta
CVE-2026-65571
69 Clothing | Brand Store & Fashion Boutique WordPress Theme <= 1.2.11.1 - Unauthenticated PHP Object Injection
Crítica
CVE-2026-12872
Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload
Media
CVE-2026-17020
Salon Booking System – Free Version < 10.31.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Booking PII Disclosure
Media
CVE-2026-65582
AI Hub - Startup & Technology WordPress Theme <= 1.3.10 - Authenticated (Subscriber+) Arbitrary File Dowload
Media
CVE-2026-15241
AI ChatBot for WooCommerce – WoowBot < 4.8.4 - Missing Authorization to Unauthenticated AI API Key Abuse
Alta
CVE-2026-65575
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor <= 1.5.3 - Unauthenticated PHP Object Injection
Media
CVE-2026-65569
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.6 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-18960
Block User Account <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Account Block Bypass
Media
CVE-2026-15237
Hotel Booking Lite <= 6.2.2 - Missing Authorization
Alta
CVE-2026-14860
Podcast Player <= 8.3.0 - Unauthenticated Server-Side Request Forgery
Crítica
CVE-2026-12586
Lenxel WP <= 1.0.31 - Unauthenticated Privilege Escalation via Account Takeover
Media
CVE-2026-66684
Export Import Menus <= 1.9.2 - Unauthenticated Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.