Media
CVE-2026-91009
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.822
Restablecer filtros
Media
CVE-2026-91008
Event Booking Manager for WooCommerce <= 5.3.7 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-91017
Robokassa payment gateway for Woocommerce <= 1.8.8 - Unauthenticated Payment Bypass
Alta
CVE-2026-75983
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
Media
CVE-2026-15402
Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter
Media
CVE-2026-85575
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter
Media
CVE-2026-84906
Eventin <= 4.1.23 - Unauthenticated Payment Bypass
Media
CVE-2026-77702
Eventin <= 4.1.23 - Missing Authorization
Media
CVE-2026-84905
Eventin <= 4.1.23 - Missing Authorization
Media
CVE-2026-74926
MultiVendorX <= 5.0.15 - Missing Authorization
Media
CVE-2026-78474
Ni WooCommerce Sales Report <= 4.1.0 - Unauthenticated Information Exposure
Media
CVE-2026-87860
Subscriptions for WooCommerce <= 2.0.2 - Cross-Site Request Forgery
Alta
CVE-2026-78472
Ni WooCommerce Sales Report <= 4.1.0 - Unauthenticated SQL Injection
Media
CVE-2026-87842
Zonify – Amazon Product Importer for WooCommerce < 1.0.5 - Unauthenticated Information Exposure
Media
CVE-2026-87888
YayPricing – WooCommerce Dynamic Pricing & Discounts < 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-87854
Subscriptions for WooCommerce <= 2.0.2 - Unauthenticated Information Exposure
Media
CVE-2026-84907
Eventin <= 4.1.23 - Missing Authorization
Media
CVE-2026-84025
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Authenticated (Custom Role+) Insecure Direct Object Reference
Media
CVE-2026-84023
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request Forgery
Media
CVE-2026-87919
Product XML Feed Manager for WooCommerce – Google Shopping, Social Sites, Skroutz & More < 3.1.1 - Missing Authorization
Media
CVE-2026-84024
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request Forgery
Media
CVE-2026-81431
Registration Form for WooCommerce 1.1.0 - 1.1.2 - Authenticated (Contributor+) Privilege Escalation
Media
CVE-2026-62106
SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.9 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2026-74925
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.0 - 5.0.15 - Authenticated (Custom Role+) Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.