Media
CVE-2026-25473
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2026-24596
Related Posts Thumbnails Plugin for WordPress <= 4.3.2 - Cross-Site Request Forgery
Media
CVE-2026-22335
WooCommerce Frontend Manager – Ultimate < 6.7.7 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2025-68015
Event Tickets with Ticket Scanner <= 2.8.5 - Unauthenticated Remote Code Execution
Media
CVE-2026-24599
NextMove Lite <= 2.23.0 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2025-68003
Shown Connector <= 1.2.10 - Missing Authorization to Unauthenticated Settings Update
Media
ghsa-595p-g7xc-c333
Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling
Baja
CVE-2026-24001
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
Alta
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Media
CVE-2026-22036
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
Media
CVE-2025-63644
pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability
Baja
CVE-2025-14457
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion
Sin evaluar
CVE-2026-0948
drupal/social_auth_entra_id - SA-CONTRIB-2026-005
Sin evaluar
CVE-2026-0947
drupal/pianoanalytics - SA-CONTRIB-2026-004
Sin evaluar
CVE-2026-0946
drupal/atsmarttag - SA-CONTRIB-2026-003
Sin evaluar
CVE-2026-0945
drupal/role_delegation - SA-CONTRIB-2026-002
Sin evaluar
CVE-2026-0944
drupal/ginvite - SA-CONTRIB-2026-001
Media
CVE-2025-14448
WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
Alta
CVE-2026-23498
Shopware Has Improper Control of Generation of Code in Twig rendered views
Alta
CVE-2026-22787
html2pdf.js contains a cross-site scripting vulnerability
Crítica
CVE-2026-22686
enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain
Media
CVE-2025-66169
Apache Camel camel-neo4j component is vulnerable to cypher injection
Alta
CVE-2025-12166
Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Media
CVE-2026-24603
Universal Google Adsense and Ads manager <= 1.1.8 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.