Media
CVE-2026-57644
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2026-57637
Abandoned Cart Lite for WooCommerce <= 6.8.0 - Cross-Site Request Forgery
Media
CVE-2026-57642
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.8 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-57646
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2025-68052
Eagle Booking <= 1.3.4.3 - Cross-Site Request Forgery
Media
CVE-2026-57659
Paid Memberships Pro - Add Member From Admin <= 0.7.2 - Cross-Site Request Forgery
Media
CVE-2026-57634
PPWP – Password Protect Pages <= 1.9.19 - Authenticated (Contributor+) Insecure Direct Object Reference
Media
CVE-2026-57648
Nelio Content – Editorial Calendar & Social Media Auto-Posting <= 4.3.4 - Missing Authorization
Alta
CVE-2025-68063
Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-66123
BookPro - Appointment Booking WordPress Plugin <= 1.1.0 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-3462
Frisbii Pay <= 1.8.9 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification
Media
CVE-2026-57323
HTML5 Video Player – Embed and Play Videos in Custom Player <= 2.11.0 - Missing Authorization
Media
CVE-2026-57661
WPComplete <= 2.9.5.5 - Missing Authorization
Media
CVE-2026-57635
FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 - Cross-Site Request Forgery
Media
CVE-2026-57638
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-57660
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization
Media
CVE-2026-57656
Hester Core <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
CVE-2026-57321
Interactive Content – H5P <= 1.17.7 - Authenticated (Contributor+) Arbitrary File Deletion
Alta
CVE-2025-68064
Goya Core < 1.0.9.4 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2026-57325
NanoMag <= 1.8 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-57322
weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce <= 2.1.2 - Reflected Cross-Site Scripting
Media
CVE-2026-57657
Gmail SMTP <= 1.2.3.19 - Cross-Site Request Forgery
Media
CVE-2026-12393
WPS Bookings for WooCommerce <= 3.11.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Order Cancellation
Media
CVE-2026-57645
Newsletters <= 4.13 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.