Media
CVE-2026-25739
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Media
CVE-2026-25738
Indico has Server-Side Request Forgery (SSRF) in multiple places
Alta
CVE-2026-25535
jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions
Media
CVE-2026-27122
Svelte SSR does not validate dynamic element tag names in `<svelte:element>`
Media
CVE-2026-27121
Svelte affected by cross-site scripting via spread attributes in Svelte SSR
Media
CVE-2026-27119
Svelte affected by XSS in SSR `<option>` element
Media
CVE-2026-27118
Cache poisoning in @sveltejs/adapter-vercel
Baja
ghsa-9ppg-jx86-fqw7
Unauthorized npm publish of cline@2.3.0 with modified postinstall script
Media
CVE-2026-25527
changedetection.io is vulnerable to unauthenticated static path traversal
Media
CVE-2026-2384
Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2026-24126
Weblate has an argument injection in management console
Alta
CVE-2026-32393
Greenly Theme Addons < 8.2 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-39671
Extra Fees Plugin for WooCommerce <= 4.3.3 - Cross-Site Request Forgery
Alta
CVE-2026-39544
LabtechCO <= 8.3 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-25385
URL Shortify <= 1.12.3 - Authenticated (Author+) Server-Side Request Forgery
Media
CVE-2026-32390
Nanosoft < 1.3.2 - Missing Authorization
Media
CVE-2026-39676
Download Manager <= 3.3.52 - Missing Authorization
Media
CVE-2026-32387
Checkout for PayPal <= 1.0.46 - Missing Authorization
Alta
CVE-2026-32392
Greenly <= 8.1 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-25386
Ally <= 4.0.2 - Missing Authorization
Media
CVE-2026-39674
MK Google Directions <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-39675
Court Reservation <= 1.10.11 - Missing Authorization
Alta
CVE-2026-39677
Emphires <= 3.9 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-32388
GLB <= 1.2.2 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.