Media
CVE-2026-40730
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.681
Restablecer filtros
Alta
CVE-2026-22515
VegaDays - Vegetarian Food Festival & Eco Event WordPress Theme <= 1.2.0 - Unauthenticated Local File Inclusion
Media
CVE-2026-22480
WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More <= 2.3.3 - Authenticated (Shop manager+) PHP Object Injection
Alta
CVE-2026-22505
Morning Records - Music Sound Studio WordPress Theme <= 1.2 - Unauthenticated PHP Object Injection
Alta
CVE-2026-27095
Bus Ticket Booking with Seat Reservation <= 5.6.2 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22500
m2 | Construction and Tools Store <= 1.1.2 - Unauthenticated PHP Object Injection
Crítica
CVE-2026-27098
Au Pair Agency - Babysitting & Nanny Theme <= 1.2.2 - Unauthenticated PHP Object Injection
Crítica
CVE-2026-2599
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
Alta
CVE-2026-22497
Jardi | Winery, Vineyard & Wine Shop WordPress Theme <= 1.7.2 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22474
Equestrian Centre <= 1.5 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22475
Estate <= 1.3.4 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22471
Secudeal Payments for Ecommerce <= 1.1 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22473
Dental Clinic <= 3.7 - Authenticated (Subscriber+) PHP Object Injection
Alta
CVE-2026-22501
Mounthood | Ski and Snowboarding HTML Template <= 1.3.2 - Unauthenticated PHP Object Injection
Alta
CVE-2026-1273
PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints
Alta
CVE-2026-22454
Solaris <= 2.5 - Unauthenticated PHP Object Injection
Alta
CVE-2025-54001
Classter <= 2.5 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22451
Handyman <= 1.4 - Unauthenticated PHP Object Injection
Alta
CVE-2026-27338
Car Zone <= 3.7 - Authenticated (Subscriber+) PHP Object Injection
Alta
CVE-2026-24385
Podlove Web Player <= 5.9.1 - Authenticated (Contributor+) PHP Object Injection
Alta
CVE-2026-22453
Pets Club <= 2.3 - Unauthenticated PHP Object Injection
Alta
CVE-2026-22417
Grand Wedding < 3.1.11 - Unauthenticated PHP Object Injection
Alta
CVE-2026-28025
Stargaze <= 1.5 - Unauthenticated Local File Inclusion
Alta
CVE-2026-27998
Vixus - Business Startup Elementor Template Kit <= 1.0.16 - Unauthenticated Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.