Media
CVE-2026-12561
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 23
Restablecer filtros
Media
CVE-2026-57734
tagDiv Composer <= 5.4.5 - Reflected Cross-Site Scripting
Media
CVE-2025-50001
tagDiv Composer <= 5.4.2 - Reflected Cross-Site Scripting
Media
CVE-2026-39712
tagDiv Composer <= 5.4.4 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2026-39692
tagDiv Composer <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-50005
tagDiv Composer <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-62030
tagDiv Composer <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-62031
tagDiv Composer <= 5.4.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-2806
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
Media
CVE-2025-3510
tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Crítica
CVE-2024-13645
TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
Media
CVE-2025-1705
tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-2804
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
Media
CVE-2024-3886
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Media
CVE-2024-5212
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Media
CVE-2024-3888
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Alta
CVE-2024-3813
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Media
CVE-2024-3814
tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Alta
CVE-2023-3169
tagDiv Composer <= 4.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-3170
tagDiv Composer <= 4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-39166
tagDiv Composer < 4.4 - Cross-Site Request Forgery to Cross-Site Scripting
Media
CVE-2023-1596
tagDiv Composer < 4.0 - Reflected Cross-Site Scripting via ‘td_video_url’
Crítica
CVE-2022-3477
tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.