Media
CVE-2026-15016
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 28
Restablecer filtros
Alta
CVE-2026-4100
Paid Memberships Pro <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Stripe Webhook Deletion and Payment Processing Disruption
Crítica
CVE-2024-37486
Paid Memberships Pro <= 3.0.5 - Authenticated (Administrator+) SQL Injection
Media
CVE-2024-37277
Paid Memberships Pro <= 3.0.4 - Unauthenticated Insecure Direct Object Reference to Order Status Update
Media
CVE-2024-1407
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification
Media
CVE-2024-32793
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery
Media
CVE-2024-3215
Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery
Media
CVE-2024-0588
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery
Media
CVE-2024-1279
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) Information Disclosure via Shortcode
Media
f6c5e3f8-ebbd-4cc3-b9b1-3f1704e3c07a
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure
Media
CVE-2024-0624
Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update
Media
852b1895-3bed-4c2f-912c-c136b38a09bb
Paid Memberships Pro <= 2.12.6 - Information Exposure in Debug Logs
Media
CVE-2023-6855
Paid Memberships Pro <= 2.12.5 - Missing Authorization via API
Alta
CVE-2023-6187
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2023-0631
Paid Memberships Pro <= 2.9.11 - Authenticated (Subscriber+) SQL Injection via Shortcodes
Media
CVE-2022-4830
Paid Memberships Pro <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Crítica
CVE-2023-23488
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection
Crítica
CVE-2021-25114
Paid Memberships Pro <= 2.6.6 - Unauthenticated SQL Injection
Media
CVE-2021-24979
Paid Memberships Pro <= 2.6.5 - Reflected Cross-Site Scripting
Media
2621cb32-3753-42e7-8690-88c680bdf808
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.9.1 - Cross-Site Scripting
Alta
CVE-2021-20678
Paid Memberships Pro <= 2.5.5 - Authenticated SQL Injection
Media
0eb90948-b2b6-4e30-b903-95b7bce5d734
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure
Media
8a68d036-9109-4bc0-9451-47fa2f9fa628
Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting
Media
CVE-2020-36754
Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.