Media
CVE-2026-25410
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2026-25014
Enter Addons <= 2.3.2 - Cross-Site Request Forgery
Alta
CVE-2025-69366
Emerce Core <= 1.8 - Unauthenticated SQL Injection
Media
CVE-2026-25418
Bit Form <= 2.21.10 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2025-69307
Medinik Core <= 1.3.6 - Unauthenticated SQL Injection
Media
CVE-2026-24357
Recipe Maker <= 10.2.4 - Missing Authorization
Media
CVE-2025-68564
Sendy <= 3.4.2 - Missing Authorization
Alta
CVE-2025-69306
Electio Core <= 1.4 - Unauthenticated SQL Injection
Media
CVE-2026-25415
WPBookit Pro <= 1.6.18 - Missing Authorization
Media
CVE-2026-24380
EventPrime <= 4.2.8.0 - Missing Authorization
Media
CVE-2025-69303
ModelTheme Framework < 2.0.0 - Missing Authorization
Alta
CVE-2025-69310
Woodly Core <= 1.4 - Unauthenticated SQL Injection
Media
CVE-2026-25411
Revision Manager TMC <= 2.8.22 - Cross-Site Request Forgery
Media
CVE-2025-67987
Quiz And Survey Master <= 10.3.1 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2025-69308
Nestbyte Core <= 1.2 - Unauthenticated SQL Injection
Media
CVE-2026-25320
FormsDB – Save Elementor Forms to Google Sheets & Post Type <= 2.1.3 - Missing Authorization
Media
CVE-2026-25319
Zita Site Library for Elementor <= 1.6.6 - Cross-Site Request Forgery
Media
CVE-2026-25015
UsersWP <= 1.2.53 - Cross-Site Request Forgery
Alta
CVE-2025-69367
Oyster - Photography WordPress <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-67978
Educare <= 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-24765
PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling
Media
CVE-2026-24134
StudioCMS has Authorization Bypass Through User-Controlled Key
Alta
CVE-2026-0844
Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field
Alta
CVE-2026-1280
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.