Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Kirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIP
Kirki <= 6.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure via 'kirki_wp_admin_get_apis' Action
Creative Mail <= 1.6.9 - Unauthenticated SQL Injection
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Missing Authorization
The Ultimate Video Player For WordPress – by Presto Player <= 4.1.3 - Missing Authorization
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.8 - Unauthenticated SQL Injection
WP Activity Log <= 5.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
WPForms Lite <= 1.10.0.4 - Unauthenticated Payment Bypass
Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links
Summarize contains a missing authorization vulnerability
Summarize contains a path traversal vulnerability
Summarize contains a missing authorization vulnerability
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
ImageMagick: Stack overflow in fx operation
ImageMagick: Use-After-Free in MSL decoder.
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
ImageMagick: Policy Bypass in MNG coder could
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.