Media
CVE-2026-32352
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.089
Restablecer filtros
Media
CVE-2026-39626
Armania <= 1.4.8 - Unauthenticated Arbitrary Shortcode Execution
Alta
CVE-2025-68536
Zota <= 1.3.14 - Unauthenticated Local File Inclusion
Alta
CVE-2025-68545
Nika <= 1.2.14 - Unauthenticated Local File Inclusion
Alta
CVE-2025-68543
Diza <= 1.3.15 - Unauthenticated Local File Inclusion
Alta
CVE-2026-24956
Download Manager Addons for Elementor <= 1.3.0 - Unauthenticated SQL Injection
Media
CVE-2026-22350
PDF for Elementor Forms + Drag And Drop Template Builder <= 6.3.1 - Missing Authorization
Media
CVE-2026-2295
WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more
Alta
CVE-2025-67998
Miraculous Elementor <= 2.0.7 - Authenticated (Subscriber+) Privilege Escalation
Alta
CVE-2025-69382
Themesflat Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
Media
CVE-2026-25028
ElementInvader Addons for Elementor <= 1.4.1 - Missing Authorization
Alta
CVE-2025-69375
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69374
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
Alta
CVE-2025-68841
TopperPack – Complete Elementor Addons, Theme & CPT Builder <= 1.2.1 - Unauthenticated Local File Inclusion
Alta
CVE-2025-67981
Besa <= 2.3.15 - Unauthenticated Local File Inclusion
Media
CVE-2026-1210
Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field
Media
CVE-2025-14274
Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
Media
CVE-2026-25416
News Kit Addons For Elementor <= 1.4.2 - Missing Authorization
Media
CVE-2026-25014
Enter Addons <= 2.3.2 - Cross-Site Request Forgery
Media
CVE-2026-25320
FormsDB – Save Elementor Forms to Google Sheets & Post Type <= 2.1.3 - Missing Authorization
Media
CVE-2026-25319
Zita Site Library for Elementor <= 1.6.6 - Cross-Site Request Forgery
Media
CVE-2026-1310
Simple calendar for Elementor <= 1.6.6 - Missing Authorization to Unauthenticated Arbitrary Calendar Entry Deletion
Media
CVE-2025-12709
Interactions – Create Interactive Experiences in the Block Editor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-0825
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.