Crítica
CVE-2026-28192
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2025-53345
Thim Core <= 2.3.3 - Authenticated (Subscriber+) Remote Code Execution
Alta
CVE-2026-61980
OMGF Pro <= 5.2.7 - Unauthenticated Arbitrary File Download
Crítica
CVE-2026-28189
Participants Database <= 2.7.8.4 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2026-18039
Essential Addons for Elementor <= 6.7.1 - Unauthenticated Privilege Escalation
Alta
CVE-2026-19091
GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision
Crítica
CVE-2026-16230
Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field
Alta
CVE-2026-13457
InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure
Alta
CVE-2026-66653
Barista <= 2.5.1 - Unauthenticated Local File Inclusion
Alta
CVE-2026-66656
Foton Core <= 1.1.1 - Unauthenticated Local File Inclusion
Media
CVE-2026-16739
Epeken All Kurir for Woocommerce <= 2.1.2 - Unauthenticated Payment Bypass
Crítica
CVE-2026-27544
QA Assistants – Driven by data <= 5.2.0.0 - Unauthenticated Remote Code Execution
Alta
CVE-2026-66657
Biagiotti Core <= 2.1.1 - Unauthenticated Local File Inclusion
Crítica
CVE-2026-61962
WP BASE Booking of Appointments, Services and Events <= 6.3.0 - Unauthenticated Remote Code Execution
Media
CVE-2026-66654
Vehica Core <= 1.0.104 - Authenticated (Subscriber+) Server-Side Request Forgery
Crítica
CVE-2026-15039
Gift Cards For WooCommerce Pro <= 4.2.9 - Unauthenticated Arbitrary File Upload
Media
CVE-2026-19050
ProSolution WP Client <= 2.0.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Crítica
CVE-2026-18048
Photo Album Plus <= 9.2.07.1 - Arbitrary File Deletion to Unauthenticated Arbitrary ZIP File Deletion
Alta
CVE-2026-66704
Gutenverse Companion <= 2.5.1 - Unauthenticated Server-Side Request Forgery
Media
cddbb0f8-fc73-46d7-80af-edb69227084f
WordPress Core <= 7.0.2 - Unauthenticated Blind Server-Side Request Forgery
Media
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
Media
CVE-2026-19075
All-in-One Video Gallery <= 4.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Alta
CVE-2026-66450
Geo Mashup <= 1.13.18 - Unauthenticated Local File Inclusion
Crítica
CVE-2026-19089
Product Input Fields for WooCommerce <= 2.0.1 - Unauthenticated Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.