Crítica
CVE-2026-65570
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 15
Restablecer filtros
Crítica
CVE-2026-3655
OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification
Alta
CVE-2025-8342
WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass
Alta
CVE-2024-6482
Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Media
CVE-2024-37429
Login with phone number <= 1.7.35 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2024-6125
Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism
Crítica
CVE-2024-5150
Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check
Media
CVE-2024-34371
Login with phone number <= 1.7.18 - Missing Authorization
Media
CVE-2024-32832
Login with phone number <= 1.6.93 - Missing Authorization
Alta
CVE-2024-32507
Login with phone number <= 1.7.16 - Unauthorized Account Password Change to Privilege Escalation
Media
CVE-2024-31424
Login with phone number <= 1.6.93 - Cross-Site Request Forgery
Alta
CVE-2023-4916
Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change
Media
CVE-2023-23492
Login with phone number <= 1.4.2 - Reflected Cross-Site Scripting
Media
CVE-2022-0598
Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-0593
Login with phone number <= 1.3.6 - Unauthenticated Remote Plugin Deletion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.