Alta
CVE-2026-29786
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Alta
CVE-2026-29784
Ghost has incomplete CSRF protections around OTC use
Alta
CVE-2026-29182
Parse Server's Cloud Hooks and Cloud Jobs bypass `readOnlyMasterKey` write restriction
Crítica
CVE-2026-29000
pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT
Alta
CVE-2026-3520
Multer Vulnerable to Denial of Service via Uncontrolled Recursion
Baja
CVE-2026-29184
@backstage/plugin-scaffolder-backend Vulnerable to Potential Session Token Exfiltration via Log Redaction Bypass
Baja
CVE-2026-29185
Backstage vulnerable to potential reading of SCM URLs using built in token
Alta
CVE-2026-29186
TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
Media
CVE-2026-32443
Product Feed PRO for WooCommerce <= 13.5.2 - Cross-Site Request Forgery
Media
CVE-2026-22480
WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More <= 2.3.3 - Authenticated (Shop manager+) PHP Object Injection
Alta
CVE-2026-22509
Gioia <= 1.4 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22505
Morning Records - Music Sound Studio WordPress Theme <= 1.2 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22503
Nelson <= 1.2.0 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22499
Lella <= 1.2 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22498
Laurent - Elegant Restaurant WordPress Theme <= 3.1 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22484
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.5.0 - Unauthenticated SQL Injection
Alta
CVE-2026-27095
Bus Ticket Booking with Seat Reservation <= 5.6.2 - Unauthenticated PHP Object Injection
Media
CVE-2026-2830
WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'
Alta
CVE-2026-22496
Hypnotherapy - Psychologist Theme <= 1.2.10 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22508
Dentalux | Dentist & Healthcare Site Template <= 3.3 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22504
ProLingua <= 1.1.12 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22495
Greenville | Private School & University Education WordPress Theme <= 1.3.2 - Unauthenticated Local File Inclusion
Media
CVE-2025-69347
Subscription for WooCommerce – WordPress Recurring Payments Plugin <= 1.8.10 - Authenticated (Customer+) Insecure Direct Object Reference
Media
CVE-2026-2025
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more < 1.19.5 - Unauthenticated Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.