Alta
CVE-2026-87909
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Media
CVE-2026-86802
To Do List Member <= 1.6 - Unauthenticated Content Injection
Media
CVE-2026-16777
Store Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' Parameter
Alta
CVE-2026-14323
Printcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters
Media
CVE-2026-66608
Unlimited Elements For Elementor <= 2.0.19 - Authenticated (Contributor+) Server-Side Request Forgery
Media
CVE-2026-89278
GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script
Media
CVE-2026-92400
Payment Gateway for PayPal on WooCommerce <= 9.2.0 - Unauthenticated Payment Bypass
Media
CVE-2026-12106
Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery via 'src' Attribute of <img> Tags
Crítica
CVE-2026-84750
Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload
Media
CVE-2026-19860
JetFormBuilder <= 3.6.5.2 - Authenticated (Administrator+) Arbitrary File Deletion
Media
CVE-2026-84091
SUMIT Payment Gateway for WooCommerce <= 3.0.0 - Unauthenticated Payment Bypass
Alta
CVE-2026-87935
Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action
Crítica
CVE-2026-87796
Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload
Media
CVE-2026-89064
All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header
Alta
CVE-2026-84738
AF Companion <= 2.1.0 - Authenticated (Shop Manager+) Remote Code Execution
Media
CVE-2026-85350
UpsellWP <= 2.2.9 - Unauthenticated Payment Bypass
Media
CVE-2026-85010
RestroPress <= 3.4.5 - Unauthenticated Payment Bypass
Alta
CVE-2026-88994
All Bootstrap Blocks 1.3.20 - 1.3.31 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2026-90984
Generate PDF using Contact Form 7 <= 4.2.1 - Unauthenticated Server-Side Request Forgery
Crítica
CVE-2026-12793
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
Crítica
CVE-2026-62104
Migratico Lite <= 2.6.8 - Unauthenticated Remote Code Execution
Crítica
CVE-2026-88795
wpShopGermany IT-RECHT KANZLEI <= 2.3 - Unauthenticated Remote Code Execution
Alta
CVE-2026-87791
Design Scuole Italia <= 2.18.1 - Unauthenticated Arbitrary File Donwload
Media
CVE-2026-91017
Robokassa payment gateway for Woocommerce <= 1.8.8 - Unauthenticated Payment Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.