Media
CVE-2026-22209
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Alta
CVE-2026-24970
Energox <= 1.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Media
CVE-2026-39536
RSVP and Event Management <= 2.7.16 - Unauthenticated Information Exposure
Media
CVE-2025-15473
Timetics – Appointment Booking Calendar & Scheduling System < 1.0.52 - Missing Authorization
Media
CVE-2026-32458
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.7 - Authenticated (Editor+) SQL Injection
Media
CVE-2026-39561
Revive.so <= 2.0.7 - Missing Authorization
Media
CVE-2026-27054
Penci Soledad Data Migrator <= 1.3.1 - Reflected Cross-Site Scripting
Media
CVE-2026-39595
W3 Total Cache <= 2.9.1 - Missing Authorization
Alta
CVE-2026-2626
Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection
Media
CVE-2026-1753
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder < 1.6.1 - Missing Authorization to Authenticated (Contributor+) Settings Update
Crítica
CVE-2026-27051
Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation
Media
CVE-2026-27068
Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting
Crítica
CVE-2026-2631
Datalogics Ecommerce Delivery – Datalogics < 2.6.60 - Unauthenticated Privilege Escalation
Alta
CVE-2026-27070
Everest Forms Pro <= 1.9.12 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-24611
MetForm Pro <= 3.9.8 - Missing Authorization
Media
CVE-2026-27071
WPCafe – Restaurant Menu, Online Food Ordering and Reservation Booking Solution <= 3.0.7 - Missing Authorization
Alta
CVE-2026-24969
Instant VA <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Media
CVE-2026-24968
Xagio SEO – AI Powered SEO <= 7.1.0.30 - Unauthenticated Privilege Escalation
Media
CVE-2026-2687
Reading progressbar < 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2026-1540
Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Remote Code Execution
Alta
CVE-2026-2466
DukaPress <= 3.2.4 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-3657
My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action
Media
CVE-2026-3226
LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering
Media
CVE-2026-39504
InstaWP Connect <= 0.1.2.5 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.