Media
CVE-2026-11872
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.504
Alta
CVE-2026-67326
GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath
Crítica
CVE-2026-8457
WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT
Alta
CVE-2026-18352
User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter
Alta
CVE-2026-13339
CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter
Media
CVE-2026-61972
ShopLentor Pro <= 2.8.5 - Missing Authorization
Media
CVE-2026-61973
ShopLentor Pro <= 2.8.5 - Missing Authorization
Media
CVE-2026-14214
Booking for Appointments and Events Calendar – Amelia < 2.4.4 - Missing Authorization
Media
CVE-2025-15669
Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder < 3.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2026-61977
JetSearch <= 3.6.1.2 - Unauthenticated Information Exposure
Media
CVE-2026-14839
Mapster WP Maps < 1.24.0 - Unauthenticated Information Exposure
Media
CVE-2026-14197
Fluent Support – Helpdesk & Customer Support Ticket System < 2.3.1 - Authenticated (Custom role+) Insecure Direct Object Reference
Media
CVE-2026-12231
Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'exad_infobox_image'
Media
CVE-2026-15262
Admin Columns for ACF Fields <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-61976
JetBlocks for Elementor <= 1.5.0 - Unauthenticated Information Exposure
Media
CVE-2026-14195
Brizy – Page Builder < 2.8.18 - Authenticated (Contributor+) Information Exposure
Media
CVE-2026-14823
Event Tickets and Registration < 5.29.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference
Media
CVE-2026-15234
Codeless Page Builder <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-13729
Podlove Podcast Publisher < 4.5.3 - Cross-Site Request Forgery
Media
CVE-2026-61975
JetReviews <= 3.0.1 - Unauthenticated Information Exposure
Media
CVE-2026-13604
Pixelavo – Server Side Tracking & Pixel + AI Ads Tools < 1.5.4 - Missing Authorization
Media
CVE-2026-14822
Event Tickets and Registration < 5.29.0.1 - Missing Authorization
Media
CVE-2026-54768
WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)
Media
CVE-2026-53573
core-geonetwork has an Open Redirect Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.