Media
CVE-2026-9811
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 57
Restablecer filtros
Alta
CVE-2026-9809
Mautic has Stored Cross-Site Scripting (XSS) in Projects Component
Alta
CVE-2026-9808
Mautic has an Authorization Bypass in API v2 Endpoints
Crítica
CVE-2026-9559
Mautic vulnerable to Path Traversal via Campaign Import
Crítica
CVE-2026-9558
Mautic has Server-Side Template Injection (SSTI) in Theme Templates
Media
CVE-2026-9557
Mautic Focus component Vulnerable to SSRF
Alta
CVE-2026-4776
Mautic has SQL Injection in API Contact Filtering
Alta
CVE-2026-3105
Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting
Crítica
CVE-2025-13828
Mautic user without privileged access to the Marketplace can install and uninstall composer packages
Media
CVE-2025-9824
Mautic Vulnerable to User Enumeration via Response Timing
Media
CVE-2025-9823
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Media
CVE-2025-9822
Mautic vulnerable to secret data extraction via elfinder
Baja
CVE-2025-9821
Mautic vulnerable to SSRF via webhook function
Media
CVE-2025-5256
Mautic has an Open Redirect vulnerability on user unlock path.
Media
CVE-2024-47055
Mautic segment cloning doesn't have a proper permission check
Media
CVE-2024-47057
Mautic allows user name enumeration due to response time difference on password reset form
Media
CVE-2024-47056
Mautic does not shield .env files from web traffic
Media
CVE-2025-5257
Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure
Media
CVE-2022-25773
Mautic allows Relative Path Traversal in assets file upload
Alta
CVE-2024-47053
Mautic allows Improper Authorization in Reporting API
Crítica
CVE-2024-47051
Mautic allows Remote Code Execution and File Deletion in Asset Uploads
Media
CVE-2024-47059
Mautic allows users enumeration due to weak password login
Media
CVE-2022-25770
Mautic has insufficient authentication in upgrade flow
Media
CVE-2021-27917
Mautic has an XSS in contact tracking and page hits report
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.