Alta
CVE-2026-5478
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2026-6248
wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
Alta
CVE-2026-40747
Ecommerce Zone <= 0.9.7 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2026-39590
Atomlab <= 2.4.5 - Unauthenticated Local File Inclusion
Alta
CVE-2026-40748
Kids Gift Shop <= 0.5.4 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2026-40746
Restaurant Zone <= 0.7.8 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2026-39489
Download Monitor <= 5.1.9 - Authenticated (Author+) Arbitrary File Download
Alta
CVE-2026-40750
Kids Online Store <= 0.8.9 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2026-40749
Charity Zone <= 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2026-39465
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.106.0 - Authenticated (Editor+) Remote Code Execution
Alta
CVE-2026-39589
Webenvo <= 0.0.6 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2026-6518
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
Alta
CVE-2026-5718
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
Alta
CVE-2026-5710
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field
Alta
CVE-2026-3464
WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file
Alta
CVE-2026-39527
WpStream – Live Streaming, Video on Demand, Pay Per View < 4.11.2 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2026-40724
Client Portal (Pro) <= 5.6.2 - Authenticated (CP Client+) Arbitrary File Download
Alta
CVE-2026-40731
ChapterOne <= 1.7 - Unauthenticated Local File Inclusion
Alta
CVE-2026-40727
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.4 - Authenticated (Sales Representative+) Arbitrary File Deletion
Alta
CVE-2026-39598
Academy LMS Pro < 3.5.2 - Authenticated (Custom+) Arbitrary File Upload
Alta
CVE-2025-14868
Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Media
CVE-2026-3875
BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Alta
CVE-2026-1620
Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter
Alta
CVE-2026-5617
Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.