Alta
CVE-2026-32577
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 34
Restablecer filtros
Crítica
CVE-2026-12277
Frontend File Manager <= 23.6 - Unauthenticated Arbitrary File Deletion
Media
CVE-2026-16292
Frontend File Manager Plugin <= 23.6 - Cross-Site Request Forgery
Alta
CVE-2026-8095
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion
Media
CVE-2026-8379
Frontend File Manager Plugin <= 23.6 - Missing Authorization to Unauthenticated File Download
Media
CVE-2026-8378
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-8380
Frontend File Manager <= 23.6 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Media
CVE-2026-5337
Frontend File Manager <= 23.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Download Access
Media
CVE-2026-0829
Frontend File Manager <= 23.5 - Missing Authorization
Alta
CVE-2026-1280
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter
Media
CVE-2026-25005
Frontend File Manager Plugin <= 23.5 - Unauthenticated Insecure Direct Object Reference
Alta
CVE-2025-14804
Frontend File Manager <= 23.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Media
CVE-2025-13382
Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming
Media
CVE-2025-64265
Frontend File Manager <= 23.2 - Missing Authorization
Media
CVE-2025-57921
Frontend File Manager <= 23.2 - Missing Authorization
Alta
CVE-2023-7306
Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Media
CVE-2025-27358
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content Injection
Media
CVE-2024-25903
Frontend File Manager <= 22.7 - Sensitive Information Exposure via user uploads
Crítica
CVE-2023-5105
Frontend File Manager Plugin <= 22.5 - Authenticated (Editor+) Directory Traversal
Alta
CVE-2022-3126
Frontend File Manager Plugin <= 21.2 - Cross-Site Request Forgery to File Upload
Media
CVE-2022-3124
Frontend File Manager <= 21.2 - Missing Authorization
Alta
CVE-2022-3125
Frontend File Manager <= 21.2 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
59b63a01-fd8b-4742-a52f-c0a7b59e9e04
Frontend File Manager <= 21.3 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2021-4369
Frontend File Manager <= 18.2 - Unauthenticated Content Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.