Media
CVE-2025-13535
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.089
Restablecer filtros
Media
CVE-2026-40763
Royal Elementor Addons <= 1.7.1056 - Missing Authorization
Media
CVE-2026-45214
Xpro Elementor Addons <= 1.5.1 - Authenticated (Contributor+) SQL Injection
Crítica
CVE-2025-15488
Responsive Plus – Elementor Templates & Starter Sites < 3.4.3 - Unauthenticated Arbitrary Code Execution
Media
CVE-2026-1206
Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
Media
CVE-2026-25007
ElementInvader Addons for Elementor <= 1.4.2 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-25398
Vertex Addons for Elementor <= 1.6.4 - Missing Authorization
Media
CVE-2026-40745
Element Pack Elementor Addons <= 8.4.2 - Authenticated (Editor+) SQL Injection
Media
CVE-2026-39500
themesflat-addons-for-elementor <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-13997
King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure
Media
CVE-2025-6229
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget`
Media
CVE-2026-1397
PQ Addons – Creative Elementor Widgets <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Attributes
Media
CVE-2026-25304
Jaroti < 1.4.8 - Reflected Cross-Site Scripting
Media
CVE-2026-25350
Miti < 1.5.3 - Reflected Cross-Site Scripting
Media
CVE-2026-25349
Loobek < 1.5.2 - Reflected Cross-Site Scripting
Media
CVE-2026-32527
WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Missing Authorization
Media
CVE-2026-25354
Reebox < 1.4.8 - Reflected Cross-Site Scripting
Media
CVE-2026-32515
Miraculous - Multi Vendor Online Music Store Elementor WordPress Theme < 2.1.2 - Missing Authorization
Media
CVE-2026-25356
Yobazar < 1.6.7 - Reflected Cross-Site Scripting
Media
CVE-2026-42644
BetterDocs <= 4.3.10 - Unauthenticated Information Exposure
Media
CVE-2026-24362
Ultimate Post Kit Addons for Elementor <= 4.0.21 - Missing Authorization
Media
CVE-2026-25430
Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.2 - Missing Authorization
Media
CVE-2026-2373
Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure
Media
CVE-2026-32462
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.