Crítica
CVE-2026-12872
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Media
CVE-2026-65582
AI Hub - Startup & Technology WordPress Theme <= 1.3.10 - Authenticated (Subscriber+) Arbitrary File Dowload
Alta
CVE-2026-14860
Podcast Player <= 8.3.0 - Unauthenticated Server-Side Request Forgery
Media
CVE-2026-12971
LearnPress <= 4.4.3 - Authenticated (Instructor+) Server-Side Request Forgery
Media
CVE-2026-13170
Eventin <= 4.1.19 - Authenticated (Editor+) Local File Inclusion
Alta
CVE-2026-16985
Squeeze <= 1.7.11 - Authenticated (Author+) Arbitrary File Upload
Alta
CVE-2026-15991
File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter
Media
CVE-2026-18470
Login & Register Forms <= 4.0.1 - Unauthenticated Registered User Email Address Disclosure
Media
CVE-2026-17012
Restore PayPal Standard for WooCommerce <= 3.1.2 - Unauthenticated Payment Verification Bypass
Crítica
CVE-2026-66665
Type Hub <= 2.0.6 - Unauthenticated Arbitrary File Upload
Alta
CVE-2026-66710
E2Pdf – Export Pdf Tool for WordPress <= 1.32.40 - Unauthenticated Local File Inclusion
Alta
7bbead7c-47b9-473f-b335-6fae4b5998d6
Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal
Alta
CVE-2026-6147
LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
Alta
CVE-2026-7693
Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter
Media
CVE-2026-7726
Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Template Cache Manipulation via 'handle_sync' AJAX Action
Alta
CVE-2026-15979
Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion
Media
CVE-2026-11421
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter
Alta
CVE-2026-18322
Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator
Alta
CVE-2026-13392
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor < 3.10.01 - Authenticated (Admin+) Remote Code Execution
Media
CVE-2026-17540
Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Arbitrary File Read
Alta
CVE-2026-66709
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels <= 6.6.42 - Authenticated (Shop Manager+) Remote Code Execution
Media
CVE-2026-16955
AI Engine <= 3.6.5 - Authenticated (Subscriber+) Arbitrary File Read
Media
CVE-2026-16282
Appointment Hour Booking <= 1.5.87 - Unauthenticated Price Manipulation
Crítica
CVE-2026-73532
Fluent Forms Pro 6.2.7 & Ninja Tables Pro 5.2.13 - Remote Code Execution via Backdoor
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.