Media
CVE-2026-13413
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 93
Restablecer filtros
Alta
CVE-2026-12470
CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action
Media
CVE-2026-13415
CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Privilege Escalation
Media
CVE-2026-13414
CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Missing Authorization to Unauthenticated Settings Change
Media
CVE-2026-13416
CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2025-14785
Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode
Media
CVE-2026-57617
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2026-48972
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2026-6518
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
Media
CVE-2026-39464
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.19.8 - Authenticated (Editor+) Server-Side Request Forgery
Media
CVE-2026-27354
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2025-68552
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Local File Inclusion
Media
CVE-2025-62083
BoomDevs WordPress Coming Soon <= 1.0.4 - Unauthenticated Information Exposure
Media
CVE-2026-27368
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.19.8 - Missing Authorization
Media
CVE-2025-58815
Aitasi Coming Soon <= 2.0.2 - Authenticated (Administrator+) PHP Object Injection
Media
CVE-2025-3949
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.18.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Media
CVE-2025-32578
Coming Soon Countdown <= 2.2 - Reflected Cross-Site Scripting
Crítica
CVE-2025-32663
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
Alta
CVE-2025-32118
CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2025-24546
Ultimate Coming Soon & Maintenance <= 1.0.9 - Cross-Site Request Forgery
Media
CVE-2025-23836
Custom Coming Soon <= 2.2 - Reflected Cross-Site Scripting
Media
CVE-2024-9503
Maintenance & Coming Soon Redirect Animation <= 2.1.3 - Missing Authorization to Settings Update
Media
CVE-2024-54283
SeedProd Pro <= 6.18.12 - Authenticated (Editor+) SQL Injection
Media
CVE-2024-54284
SeedProd Pro <= 6.18.12 - Authenticated (Administrator+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.