Media
CVE-2026-28099
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Alta
CVE-2026-28094
RexCoin <= 1.2.6 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28065
Eject <= 2.17 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28060
S.King <= 1.5.3 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28059
Dermatology Clinic <= 1.4.3 - Unauthenticated Local File Inclusion
Media
CVE-2026-28101
UberSlider MouseInteraction <= 2.3 - Reflected Cross-Site Scripting
Alta
CVE-2026-28087
Filmax <= 1.1.11 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28086
Run Gran <= 2.0 - Unauthenticated Local File Inclusion
Media
CVE-2026-28100
UberSlider PerpetuumMobile <= 2.3 - Reflected Cross-Site Scripting
Media
CVE-2026-32422
EasyCart <= 5.8.13 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-28102
UberSlider Classic <= 2.5 - Reflected Cross-Site Scripting
Alta
CVE-2026-28053
Miller <= 1.3.3 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28061
Tiger Claw <= 1.1.14 - Unauthenticated Local File Inclusion
Media
CVE-2026-32424
Sprout Clients <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2026-28097
Artrium <= 1.0.14 - Unauthenticated Local File Inclusion
Media
CVE-2026-2831
MailArchiver <= 4.5.0 - Authenticated (Admininistrator+) SQL Injection via 'logid' Parameter
Media
CVE-2026-1305
Japanized for WooCommerce <= 2.8.4 - Missing Authorization to Unauthenticated Paidy Order Manipulation
Media
CVE-2025-14142
Electric Enquiries <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute
Media
CVE-2026-2362
WP Accessibility <= 2.3.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute
Media
CVE-2026-2383
Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Media
CVE-2025-14149
Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link
Media
CVE-2025-14040
Automotive Car Dealership Business WordPress Theme <= 13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action Fields
Crítica
CVE-2025-12981
Listee <= 1.1.6 - Unauthenticated Privilege Escalation
Media
CVE-2026-1558
WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.