Media
CVE-2026-94174
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2026-95593
Ultimeter – the Ultimate Progress and Goals Meter <= 3.0.8 - Authenticated (Editor+) SQL Injection
Media
CVE-2026-94124
Shopping Cart & eCommerce Store <= 5.9.4 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-93773
Mollie Forms <= 2.11.0 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-93527
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.10 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-94679
Fluent Support – Helpdesk & Customer Support Ticket System <= 2.3.2 - Missing Authorization
Media
CVE-2026-95522
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.0 - Authenticated (Shop Manager+) SQL Injection
Media
CVE-2026-94118
Premium Blocks – Gutenberg Blocks, Patterns & Templates <= 2.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2026-86583
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields
Media
CVE-2026-94080
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.70 - Missing Authorization
Alta
CVE-2026-19125
EthPress <= 2.3.5 - Unauthenticated Authentication Bypass
Media
CVE-2026-94671
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-95602
YITH Request a Quote for WooCommerce < 4.46.1 - Unauthenticated Insecure Direct Object Reference
Alta
CVE-2026-95601
Product Filter for WooCommerce by WBW <= 3.1.7 - Unauthenticated SQL Injection
Media
CVE-2026-78394
Link Library <= 7.9.5 - Authenticated (Contributor+) Path Traversal
Alta
CVE-2026-89237
Bluff Post <= 1.1.1 - Unauthenticated SQL Injection
Media
CVE-2026-96828
Simple Discount Rules for Woocommerce <= 5.18 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2026-78397
Link Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2026-95525
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Arbitrary File Deletion
Media
CVE-2026-95524
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Unauthenticated Unauthorized User Registration
Media
CVE-2026-96345
Estatik Real Estate Plugin <= 4.3.5 - Authenticated (Administrator+) SQL Injection
Media
CVE-2026-96827
Admin Notices Manager <= 1.6.0 - Authenticated (Administrator+) SQL Injection
Media
CVE-2026-95523
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Subscription Gate Bypass on Post Submission
Media
CVE-2026-78393
Link Library <= 7.9.5 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.